summaryrefslogtreecommitdiff
path: root/stories/faq.html
diff options
context:
space:
mode:
Diffstat (limited to 'stories/faq.html')
-rw-r--r--stories/faq.html253
1 files changed, 253 insertions, 0 deletions
diff --git a/stories/faq.html b/stories/faq.html
new file mode 100644
index 0000000..127e074
--- /dev/null
+++ b/stories/faq.html
@@ -0,0 +1,253 @@
1<!DOCTYPE html>
2<html prefix="og: http://ogp.me/ns# article: http://ogp.me/ns/article#
3" lang="en">
4<head>
5<meta charset="utf-8">
6<meta name="viewport" content="width=device-width, initial-scale=1">
7<title>Frequently Asked Questions | SUHOSIN</title>
8<link href="../assets/css/all-nocdn.css" rel="stylesheet" type="text/css">
9<meta name="theme-color" content="#5670d4">
10<meta name="generator" content="Nikola (getnikola.com)">
11<link rel="canonical" href="https://suhosin.org/stories/faq.html">
12<link rel="icon" href="../favicon.png" sizes="32x32">
13<link rel="icon" href="../favicon_256x256.png" sizes="256x256">
14<!--[if lt IE 9]><script src="../assets/js/html5.js"></script><![endif]--><meta name="author" content="SektionEins">
15<meta property="og:site_name" content="SUHOSIN">
16<meta property="og:title" content="Frequently Asked Questions">
17<meta property="og:url" content="https://suhosin.org/stories/faq.html">
18<meta property="og:description" content="This page is a collection of questions that occur from time to time.
19
20General
21
22What does Suhosin mean?
23Suhosin (수호신) is a South-Korean word that means something very similar to the english guardian-an">
24<meta property="og:type" content="article">
25<meta property="article:published_time" content="2014-06-11T11:02:00+02:00">
26</head>
27<body>
28<a href="#content" class="sr-only sr-only-focusable">Skip to main content</a>
29
30<!-- Menubar -->
31
32<nav class="navbar navbar-expand-md static-top mb-4
33navbar-dark bg-dark
34"><div class="container">
35<!-- This keeps the margins nice -->
36 <a class="navbar-brand" href="https://suhosin.org/">
37
38 <span id="blog-title">SUHOSIN</span>
39 </a>
40 <button class="navbar-toggler" type="button" data-toggle="collapse" data-target="#bs-navbar" aria-controls="bs-navbar" aria-expanded="false" aria-label="Toggle navigation">
41 <span class="navbar-toggler-icon"></span>
42 </button>
43
44 <div class="collapse navbar-collapse" id="bs-navbar">
45 <ul class="navbar-nav mr-auto">
46<li class="nav-item">
47<a href="download.html" class="nav-link">Download</a>
48 </li>
49<li class="nav-item dropdown">
50<a href="#" class="nav-link dropdown-toggle" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false">Documentation</a>
51 <div class="dropdown-menu">
52 <a href="feature-list.html" class="dropdown-item">Feature List</a>
53 <a href="install.html" class="dropdown-item">Installing Suhosin</a>
54 <a href="configuration.html" class="dropdown-item">Configuration</a>
55 <a href="howtos.html" class="dropdown-item">HOWTOs</a>
56 <a href="#" class="dropdown-item active">FAQ <span class="sr-only">(active)</span></a>
57 <a href="benchmark.html" class="dropdown-item">Benchmark</a>
58 </div>
59 </li>
60<li class="nav-item dropdown">
61<a href="#" class="nav-link dropdown-toggle" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false">Github</a>
62 <div class="dropdown-menu">
63 <a href="https://raw.githubusercontent.com/sektioneins/suhosin/master/Changelog" class="dropdown-item">Changelog</a>
64 <a href="https://github.com/sektioneins/suhosin" class="dropdown-item">Sources</a>
65 <a href="https://github.com/sektioneins/suhosin/issues" class="dropdown-item">Bugtracker</a>
66 </div>
67 </li>
68<li class="nav-item dropdown">
69<a href="#" class="nav-link dropdown-toggle" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false">SektionEins</a>
70 <div class="dropdown-menu">
71 <a href="https://sektioneins.de/en/index.html#services" class="dropdown-item">Security Audits</a>
72 <a href="https://sektioneins.de/en/index.html#news" class="dropdown-item">News</a>
73 <a href="https://sektioneins.de/en/kontakt.html" class="dropdown-item">Contact</a>
74 </div>
75
76
77 </li>
78</ul>
79<ul class="navbar-nav navbar-right"></ul>
80</div>
81<!-- /.navbar-collapse -->
82 </div>
83<!-- /.container -->
84</nav><!-- End of Menubar --><div class="container" id="content" role="main">
85 <div class="body-content">
86 <!--Body content-->
87
88
89<article class="post-text storypage" itemscope="itemscope" itemtype="http://schema.org/Article"><header><h1 class="p-name entry-title" itemprop="headline name"><a href="#" class="u-url">Frequently Asked Questions</a></h1>
90
91
92
93 </header><div class="e-content entry-content" itemprop="articleBody text">
94 <div>
95<p>This page is a collection of questions that occur from time to time.</p>
96<div class="section" id="general">
97<h2>General</h2>
98<div class="section" id="what-does-suhosin-mean">
99<h3>What does Suhosin mean?</h3>
100<p>Suhosin (수호신) is a South-Korean word that means something very similar to the english guardian-angel.</p>
101</div>
102<div class="section" id="why-is-suhosin-called-suhosin">
103<h3>Why is Suhosin called Suhosin?</h3>
104<p>According to some blog entries a few Korean people are kinda surprised about the name. They wonder why a German developer has chosen a Korean word for his project’s name. The reason for this is very simple. The main developer of Suhosin is interested in Korea for quite some time now, he enjoys watching Korean movies, loves Korean food and he has been learning the Korean language for several years now. Additionally the word ‘suhosin’ is quite simple, sounds interesting, describes exactly what the program is and bypasses the problem that most English words are already taken by popular software.</p>
105</div>
106<div class="section" id="why-should-you-use-the-suhosin-patch-or-the-suhosin-extension">
107<h3>Why should you use the Suhosin-Patch or the Suhosin Extension?</h3>
108<p>This question is actually the most important one. Important enough that the answer is covered by its own section.</p>
109</div>
110<div class="section" id="should-i-run-hardening-patch-or-suhosin">
111<h3>Should I run Hardening-Patch or Suhosin</h3>
112<p>Suhosin is actually a replacement for the Hardening-Patch. Looking at the feature set of Suhosin it is already with it’s first public release more powerful than the Hardening-Patch ever was. With the first public stable release of Suhosin the Hardening-Patch is deprecated and only Suhosin should be used in new installations.</p>
113</div>
114<div class="section" id="what-license-is-suhosin-under">
115<h3>What license is Suhosin under?</h3>
116<p>The Suhosin-Patch is a patch against the PHP code base. It heavily uses #defines from the original PHP code tree and is therefore released under the same license. The extension is also released under the same license. Currently this is the The PHP License, version 3.01.</p>
117</div>
118</div>
119<div class="section" id="installation-configuration">
120<h2>Installation &amp; Configuration</h2>
121<div class="section" id="will-my-application-break-because-suhosin-is-too-restrictive">
122<h3>Will my application break because Suhosin is too restrictive?</h3>
123<p>Some people fear that the protections implemented by Suhosin are too restrictive for their applications and that after installing it, their applications stop working. Therefore Suhosin comes with a special configuration option: suhosin.simulation. When this is enabled Suhosin will continue logging violated rules but the actual blocking will not be performed.</p>
124</div>
125<div class="section" id="how-can-i-find-out-the-problem-when-my-application-breaks">
126<h3>How can I find out the problem when my application breaks?</h3>
127<p>It is a good start to enable Suhosin's logging feature in addition to PHP's logging. See <tt class="docutils literal">suhosin.log.*</tt> in the <a class="reference external" href="configuration.html">documentation</a>.</p>
128</div>
129<div class="section" id="does-suhosin-run-on-windows">
130<h3>Does Suhosin run on Windows?</h3>
131<p>Short answer: No.</p>
132<p>While there is no official support for Windows (yet), Suhosin has been known to compile and run on modern Windows machines with IIS and Apache. However, running Suhosin on Windows has not been thoroughly tested and may not work as expected.</p>
133</div>
134<div class="section" id="will-suhosin-run-on-my-old-php-5-0-5-1-5-2-5-3">
135<h3>Will Suhosin run on my old PHP 5.0 / 5.1 / 5.2 / 5.3?</h3>
136<p>Short answer: Yes, but...</p>
137<p>PHP 5.x and Suhosin version 0.9.37 work well together. Later Suhosin versions will have dropped support for PHP 5.2 and below.</p>
138</div>
139<div class="section" id="some-tests-failed-related-to-function-blacklist-whitelist">
140<h3>Some tests failed related to function blacklist/whitelist</h3>
141<p>Example <tt class="docutils literal">make test</tt> output:</p>
142<pre class="literal-block">
143...
144=====================================================================
145FAILED TEST SUMMARY
146---------------------------------------------------------------------
147Testing: suhosin.executor.func.blacklist=printf [tests/executor/function_blacklist_printf.phpt]
148Testing: suhosin.executor.func.whitelist=call_user_func [tests/executor/function_whilelist_call_user_func.phpt]
149=====================================================================
150</pre>
151<p>The function blacklist/whitelist is not working properly with old PHP version 5.4 and below. This bug has been resolved starting with PHP 5.5. Please upgrade PHP if you need this feature.</p>
152</div>
153<div class="section" id="why-does-session-encryption-not-work-with-my-custom-php-installation">
154<h3>Why does session encryption not work with my custom PHP installation?</h3>
155<p>Transparent session encryption relies on the PHP session extension to be compiled into PHP (statically or as shared library). This will be checked when the Suhosin extension is compiled. Check for compiled in modules like so:</p>
156<pre class="literal-block">
157$ php -m
158[PHP Modules]
159Core
160...
161session
162...
163</pre>
164<p>Or otherwise, try to load the shared extension:</p>
165<pre class="literal-block">
166$ php -d display_errors=1 -d extension=session.so -r ''
167(no warning means, this worked.)
168</pre>
169<p>Also, the session extension must be loaded when Suhosin starts up. So the loading order matters:</p>
170<pre class="literal-block">
171php -d extension=session.so -d extension=suhosin.so ...
172</pre>
173<p>If the loading order is wrong, you will probably see something like this when loading Suhosin:</p>
174<pre class="literal-block">
175Undefined symbol "ps_globals" in Unknown on line 0
176</pre>
177</div>
178<div class="section" id="should-i-use-suhosin-as-shared-extension">
179<h3>Should I use Suhosin as shared extension?</h3>
180<p>Suhosin is meant to be used as shared extension only. However there have been reports of compiled in Suhosin working just fine, but that may be coincidental.</p>
181</div>
182<div class="section" id="i-use-xampp-on-osx-and-my-compiler-complains-about-strnlen">
183<h3>I use XAMPP on OSX and my compiler complains about strnlen().</h3>
184<p>The precompiled PHP comes with a php_config.h, that does not reflect your specific system.</p>
185<p>Please refer to one of the following options:</p>
186<ul>
187<li>
188<p class="first">compile PHP yourself</p>
189</li>
190<li>
191<p class="first">use the PHP shipped with OSX 10.0</p>
192</li>
193<li>
194<p class="first">define HAVE_STRNLEN yourself while compiling Suhosin:</p>
195<blockquote>
196<pre class="literal-block">
197./configure --with-php-config=/Applications/XAMPP/xamppfiles/bin/php-config
198make CFLAGS="-DHAVE_STRNLEN=1"
199</pre>
200</blockquote>
201</li>
202</ul>
203</div>
204</div>
205<div class="section" id="help-support">
206<h2>Help &amp; Support</h2>
207<div class="section" id="i-found-a-bug-how-can-i-report-it">
208<h3>I found a bug. How can I report it?</h3>
209<p>We have an issue tracker on <a class="reference external" href="https://github.com/sektioneins/suhosin/issues">Github</a>.</p>
210<p>Please make sure that your bug description contains enough information to replicate the problem, e.g.</p>
211<ul class="simple">
212<li>operating system</li>
213<li>PHP version</li>
214<li>Suhosin version</li>
215<li>compile flags</li>
216<li>Apache version</li>
217<li>example code</li>
218<li>a brief description outlining the problem</li>
219</ul>
220</div>
221<div class="section" id="where-can-i-find-even-more-help">
222<h3>Where can I find even more help?</h3>
223<ul class="simple">
224<li>The <a class="reference external" href="configuration.html">configuration page</a> is rather extensive.</li>
225<li>You can search our <a class="reference external" href="https://github.com/sektioneins/suhosin/issues">issue tracker</a> (also the closed issues).</li>
226</ul>
227</div>
228<div class="section" id="i-need-professional-support-for-my-company">
229<h3>I need professional support for my company.</h3>
230<p>Please use our <a class="reference external" href="https://sektioneins.de/en/stories/kontakt.html">contact form</a> and we will get back to you soon.</p>
231</div>
232</div>
233</div>
234 </div>
235
236
237</article><!--End of body content--><footer id="footer"><a href="https://sektioneins.de/en/"><img src="../images/s1-logo-transparent-small.png" id="footerimg"></a><div id="footertext">© 2019 <a href="https://sektioneins.de/en/">SektionEins GmbH</a> • <a href="https://sektioneins.de/en/impressum.html">Imprint</a> • <a href="https://sektioneins.de/en/privacy.html">Privacy Statement</a>
238</div>
239
240 </footer>
241</div>
242</div>
243
244
245 <script src="../assets/js/all-nocdn.js"></script><script>
246 baguetteBox.run('div#content', {
247 ignoreClass: 'islink',
248 captions: function(element) {
249 return element.getElementsByTagName('img')[0].alt;
250 }});
251 </script>
252</body>
253</html>