Installing Suhosin as PHP Extension in Linux

Unlike the Hardening-Patch for PHP, nearly all of Suhosin´s features are within the extension. Therefore you might want to only install the extension and use a plain unpatched PHP. Depending on the system we might already offer binary packages. You can check our Suhosin Downloads page. In that case you only need to activate the extension inside your php.ini and maybe add Configuration directives if you are not satisfied by the default values.

Before you continue compiling the Suhosin-Extension you should verify the file integrity. Please check the preparation section of this guide. The next step is unpacking the extension tarball and performing the usual compilation steps for PHP extensions.

#> cd suhosin
#> phpize
#> ./configure
#> make
#> make install

This should install suhosin in the correct extension directory. The final step is adding a load directive to php.ini

extension=suhosin.so

and optionally add some Configuration directives in case you do not like the default values.

FreeBSD Users?

The Suhosin extension is within the FreeBSD ports. Therefore installing it on FreeBSD is very simple. To install the extension just do

#> cd /usr/ports/security/php-suhosin
#> make
#> make install

Related posts:

1. Installing and configuring monit to monitor your server(s)
2. Secure your Linux Servers
3. Installing DirectAdmin in dedicated server
4. DoS Protection via APF, BFD, DDOS and RootKit
5. Hardening/Securing SSHD (Secure SHell Daemon)