You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@httpd.apache.org by André Malo <nd...@perlig.de> on 2004/06/22 18:19:24 UTC

Re: cvs commit: apache-1.3/src/include ap_config.h

* martin@apache.org wrote:

>   Enable AP_ENABLE_EXCEPTION_HOOK for BS2000

I'm not sure, if this is a good idea. The idea behind this define was to
make the enabling explicit, because of the security implications...

nd

Re: AP_ENABLE_EXCEPTION_HOOK default?!

Posted by Jeff Trawick <tr...@attglobal.net>.

André Malo wrote:
> * André Malo <nd...@perlig.de> wrote:
> 
> 
>>* martin@apache.org wrote:
>>
>>
>>>  Enable AP_ENABLE_EXCEPTION_HOOK for BS2000
>>
>>I'm not sure, if this is a good idea. The idea behind this define was to
>>make the enabling explicit, because of the security implications...
> 
> 
> Oh well, Martin noted me, that the define is set on several platforms by
> default. Why is that?

See thread "[1.3 PATCH] a different take on forensics" back in January.

The active 1.3 folks were comfortable with turning on AP_ENABLE_EXCEPTION_HOOK 
for platforms where it is known to work.

However AP_ENABLE_EXCEPTION_HOOK gets turned on (ap_config.h or user build 
setting), EnableExceptionHook directive must be set to On to enable it at run-time.

AP_ENABLE_EXCEPTION_HOOK default?!

Posted by André Malo <nd...@perlig.de>.

* André Malo <nd...@perlig.de> wrote:

> * martin@apache.org wrote:
> 
> >   Enable AP_ENABLE_EXCEPTION_HOOK for BS2000
> 
> I'm not sure, if this is a good idea. The idea behind this define was to
> make the enabling explicit, because of the security implications...

Oh well, Martin noted me, that the define is set on several platforms by
default. Why is that?

nd
-- 
sub the($){+shift} sub answer (){ord q
        [* It is always 42! *]       }
           print the answer
# André Malo # http://pub.perlig.de/ #