ModSecurity

Brought to you by: victorhora, zimmerletw

Re: [mod-security-users] Statically/dynamically link apr & apr-util

Re: [mod-security-users] Statically/dynamically link apr & apr-util

From: Reindl Harald <h.reindl@th...> - 2013-12-20 13:12:22

Attachments: signature.asc


Am 20.12.2013 14:07, schrieb Nick Gearls:
> How to (permanently) choose between statically/dynamically link ModSecurity with apr& apr-util?
> Is there any way to specify it at configuration time or

tis makes little sense because the apr version used to
build httpd and mod_security should be the same and
you really do not link the same lib statically for both
or even worse different versions of it

Thread view

[mod-security-users] Statically/dynamically link apr & apr-util

From: Nick Gearls <nickgearls@gm...> - 2013-12-20 13:08:17

<html>
  <head>

    <meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <font face="Calibri">How to (permanently) choose between
      statically/d<font face="Calibri">y</font>namically link
      ModSecurity with apr<font face="Calibri"> &amp; </font>apr-util?<br>
      <font face="Calibri">Is there any way to specify it at
        configuration time or </font><br>
      <br>
      <font face="Calibri">Thanks<br>
        <br>
        <font face="Calibri">Nick</font><br>
      </font></font>
  </body>
</html>

Re: [mod-security-users] Statically/dynamically link apr & apr-util

From: Reindl Harald <h.reindl@th...> - 2013-12-20 13:12:22

Attachments: signature.asc


Am 20.12.2013 14:07, schrieb Nick Gearls:
> How to (permanently) choose between statically/dynamically link ModSecurity with apr& apr-util?
> Is there any way to specify it at configuration time or

tis makes little sense because the apr version used to
build httpd and mod_security should be the same and
you really do not link the same lib statically for both
or even worse different versions of it

Re: [mod-security-users] Statically/dynamically link apr & apr-util

From: Nick Gearls <nickgearls@gm...> - 2013-12-24 12:44:45

Don't judge too fast: you may have reasons to link to a specific 
version, like modifying the default buffer size of the internal APR tables.
And nothing forbids you to use the same static library for httpd & 
mod_security

On 20-12-2013 14:12, Reindl Harald wrote:
>
> Am 20.12.2013 14:07, schrieb Nick Gearls:
>> How to (permanently) choose between statically/dynamically link ModSecurity with apr& apr-util?
>> Is there any way to specify it at configuration time or with additional flags
> tis makes little sense because the apr version used to
> build httpd and mod_security should be the same and
> you really do not link the same lib statically for both
> or even worse different versions of it

Re: [mod-security-users] Statically/dynamically link apr & apr-util

From: Reindl Harald <h.reindl@th...> - 2013-12-24 12:52:50

Attachments: signature.asc

i judge that fast because statically linking is the
start of all evil - there are good reasons linux
distribution un-bundles any piece of software

in case of a security-update of the statically linked
library you most likely forget some pieces of software
you built this way and the update is pointless

if you want to change whatever flags rebuild your dynamically
linked library and you are done - if other software using it
don't work after that re-consider if the change is a good idea

apr-1.5.0-4.fc19.20131127.rh.x86_64
httpd-2.4.7-4.fc19.20131223.rh.x86_64
mod_security-2.7.7-2.fc19.20131223.rh.x86_64

Am 24.12.2013 13:44, schrieb Nick Gearls:
> Don't judge too fast: you may have reasons to link to a specific 
> version, like modifying the default buffer size of the internal APR tables.
> And nothing forbids you to use the same static library for httpd & 
> mod_security
> > 
> On 20-12-2013 14:12, Reindl Harald wrote:
>>
>> Am 20.12.2013 14:07, schrieb Nick Gearls:
>>> How to (permanently) choose between statically/dynamically link ModSecurity with apr& apr-util?
>>> Is there any way to specify it at configuration time or with additional flags
>> tis makes little sense because the apr version used to
>> build httpd and mod_security should be the same and
>> you really do not link the same lib statically for both
>> or even worse different versions of it

Re: [mod-security-users] Statically/dynamically link apr & apr-util

From: Reindl Harald <h.reindl@th...> - 2013-12-24 12:56:57

Attachments: signature.asc


Am 24.12.2013 13:44, schrieb Nick Gearls:
> Don't judge too fast: you may have reasons to link to a specific 
> version, like modifying the default buffer size of the internal 
> APR tables

i doubt that will be a win given that you link a 200 KB library
twice in your process which is not shared and eats that way
the other optimizings win

avoid premature optimizing and look at the big picture

-rwxr-xr-x 1 root root 207K 2013-11-27 16:25 /usr/lib64/libapr-1.so.0.5.0

Thanks for helping keep SourceForge clean.

ModSecurity

Brought to you by: victorhora, zimmerletw

Re: [mod-security-users] Statically/dynamically link apr & apr-util

Thread view