This add-on, patch, etc is causing problems with flash related applications and is a royal pain to remove. My attempts to remove it have not yet been successful and am considering moving to a different distribution.
Thank you for your thoughts and comments.
What problems are you having with suhosin, if memory serves the debian php package only contains the patch which doesn't do much in the way of restricting things.
I guess this leads me to one other question.
I have used Fedora in the past but am not familiar with CentOS. Could anyone comment as to substantial differences between them in respect to server configurations?
I am looking at a LAMP type configuration that is secure.
Apache2, MySQL and PHP 5.x (preferably 5.3).
Main focus is to host multiple websites that I have created via VirtualHosts options.
fedora = new and "unstable" fedora has a short life cycle (see
Personally I wouldn't use either of them in a server system, if I had to use one I'd chose centos and get updated rpms from a 3rd party repo (see
If I were you I'd try and resolve my issues with suhosin and stick with ubuntu/debian.
Alternatively you could try one of the other supported distros I don't know much about them but googling them will provide info on life cycle, php details etc, and someone else that uses them might chirp up here.
I know that the full-on Suhosin binary does cause issues with a lot more than just flash based apps though. It's definitively a trade off of "let's make your server 'secure' but you can't do a whole lot of anything, have fun" type of "enhancement"