Suhosin 0.9.34-dev installation howto

With the recently released PHP 5.4, the Suhosin patch and extension were removed from many Linux distribution packages (i.e., Debian et al.) and until three weeks ago, there was no possibility to compile and run the Suhosin extension under PHP 5.4. This little howto shall serve as installation instruction for Debian Wheezy users - your mileage may vary. I blogged about this here

First, make sure you have the appropriate PHP modules installed for your distribution. In Wheezy, you will need at least php5-common, php5-dev and one or more or these: libapache-mod-php5filter, php5-cli, php5-cgi

You can install them with

apt-get install php5-common php5-dev php5-cli

for example.

Next, we will download, compile and install the Suhosin extension. There is a .tar.gz download here: Github/stefanesser. Download this file to your /usr/local/src directory:

cd /usr/local/src

wget https://github.com/stefanesser/suhosin/tarball/master

tar zxvf master

Now, let’s compile the thing.

cd /usr/local/src/stefanesser-suhosin-716a292

phpize
This should yield the following output:

Configuring for:

PHP Api Version:         20100412

Zend Module Api No:      20100525

Zend Extension Api No:   220100525

./configure

checking for grep that handles long lines and -e... /bin/grep

[..]

config.status: executing libtool commands

make

[..]

Build complete.

Don’t forget to run ‘make test’.

The last step is installation.

 make install

Installing shared extensions:     /usr/lib/php5/20100525/

Now the extension is installed, but not yet configured or activated. Fortunately, Stefan has provided a default configuration file in the distribution tarball that you can just copy over.

cp suhosin.ini /etc/php5/conf.d

If you execute php -v, you should now see the following:

PHP 5.4.0-3 (cli) (built: Mar 21 2012 20:33:26) 

Copyright (c) 1997-2012 The PHP Group

Zend Engine v2.4.0, Copyright (c) 1998-2012 Zend Technologies

    with Suhosin v0.9.34-dev, Copyright (c) 2007-2012, by SektionEins GmbH