Re: IBM i 7.6 Development tools

Hello Jon,

Am 24.04.2025 um 01:33 schrieb Jon Paris <jon.paris@xxxxxxxxxxxxxx>:

Not strictly true.

Apache on IBM i is a native port and therefore benefits from the tag bit protection of all native apps. So, many of the buffer overrun and similar type exploits that affect other platforms will not impact IBM i.

Good point! And yet another reason for me to be suspicious about PASE.

Yet in practice, there are more security flaws being found and fixed in PHP, compared to Apache. Apache has become rather stable, because new features are added sparsely and corner cases have been found and eliminated over decades.

In Linux, one can run PHP as "shared object" within the Apache address space (better performance, less resource consumption, but all sites will be accessed with the user Apache runs as), or as external process (more security because each site can run with a separate user profile). I don't know how PHP on IBM i works, tho.

:wq! PoC