Re: [Devil-linux-develop] Apache/PHP file uploads?

[Heiko Z. <he...@zu...>]

Quoting Bruce Smith <bw...@ar...>:

>> Sorry for my late and sparse answers, but I'm currently moving into my
>> new house and I'm sick...
>
> No problem, I hope you feel better soon!
>
>> You can turn it off globally via menuconfig (requires are mrproper) or
>> for specific programs by adding
>> CC="gcc -fPIC -fno-stack-protector -U_FORTIFY_SOURCE -nonow -nopie" to
>> the make statement.
>
> OK, I added that CC to the make in both httpd and php build scripts.
>
> 'make clean makefile', and now ... Apache/PHP file uploads work!  :-)
>
>> The CC statement I gave you here turns everything off, you may only
>> need a subset of it.
>
> Now comes the long process of trial & error to see which option causes
> the problem ...   :-(
>
> I'm guessing that only PHP needs the CC option(s), since I'm using PHP
> to do the file uploads, so I'll try removing the CC from httpd first.
>
> Assuming that works, any idea what option(s) are most likely to solve
> the problem on PHP, so I can try them first?

Try the fortify source first, then I'd play with the pie stuff (now  
I'm getting hungry).

-- 

Regards
   Heiko Zuerker
   http://www.devil-linux.org


----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.