Re: [Devil-linux-develop] Apache/PHP file uploads?

[Bruce S. <bw...@ar...>]

> >> You can turn it off globally via menuconfig (requires are mrproper) or
> >> for specific programs by adding
> >> CC="gcc -fPIC -fno-stack-protector -U_FORTIFY_SOURCE -nonow -nopie" to
> >> the make statement.
> > Assuming that works, any idea what option(s) are most likely to solve
> > the problem on PHP, so I can try them first?
> 
> Try the fortify source first, then I'd play with the pie stuff

OK, I tried just -U_FORTIFY_SOURCE first.  No good.
Then I added -nopie and compiled php again.  No good.
Then I added -fno-stack-protector.  And it worked (with all three).

Then I removed the first two options and compiled with ONLY
-fno-stack-protector.  And ... it still works.

Should I check it in with only -fno-stack-protector ?
Or is there any other options that should go with it?


> (now I'm getting hungry).

<homer simpson voice>
Ummmmm, pie ...
</duh!>   :-)

But the "pie stuff" didn't work, so NO PIE FOR YOU!  ;-)
</variation on Seinfeld soup episode>

Hey, you started it!  :-)

 - BS