Re: [SECURITY] [DSA 3074-2] php5 regression update

2014-11-19 Thread David MENTRE
Hello, Le 19/11/2014 15:09, Steve Kemp a écrit : Take a look at /etc/sysctl.conf, and the comments at the top of that file pointing to the man-page and other locations. Thank you for the quick answer. And thanks also to Joseph Hauptmann who answered even more quickly. ;-) Best regards,

Re: [SECURITY] [DSA 3074-2] php5 regression update

2014-11-19 Thread Steve Kemp
On Wed Nov 19, 2014 at 14:57:13 +0100, David MENTRE wrote: > >so people are advised to keep kernel > >symlink protection (sysctl fs.protected_symlinks=1) enabled as it is by > >default on Wheezy > > This setting is not set on my Wheezy machine. > > How can I set it permanently (i.e. across reboo

Re: [SECURITY] [DSA 3074-2] php5 regression update

2014-11-19 Thread Sébastien NOBILI
Le mercredi 19 novembre 2014 à 15:12, Sébastien NOBILI a écrit : > Le mercredi 19 novembre 2014 à 14:57, David MENTRE a écrit : > > Le 19/11/2014 11:49, Yves-Alexis Perez a écrit : > > >so people are advised to keep kernel > > >symlink protection (sysctl fs.protected_symlinks=1) enabled as it is by

Re: [SECURITY] [DSA 3074-2] php5 regression update

2014-11-19 Thread Sébastien NOBILI
Le mercredi 19 novembre 2014 à 14:57, David MENTRE a écrit : > Le 19/11/2014 11:49, Yves-Alexis Perez a écrit : > >so people are advised to keep kernel > >symlink protection (sysctl fs.protected_symlinks=1) enabled as it is by > >default on Wheezy > > This setting is not set on my Wheezy machine.

Re: [SECURITY] [DSA 3074-2] php5 regression update

2014-11-19 Thread David MENTRE
Hello, Le 19/11/2014 11:49, Yves-Alexis Perez a écrit : so people are advised to keep kernel symlink protection (sysctl fs.protected_symlinks=1) enabled as it is by default on Wheezy This setting is not set on my Wheezy machine. How can I set it permanently (i.e. across reboots). Best regard