php-formula/php/suhosin.sls

{%- from "php/map.jinja" import php with context %}

include:
  - php
  - php.dev

{%- set php_version = salt['pillar.get']('php:version', '7.0')|string %}

{%- if salt['grains.get']('os') == "Ubuntu" %}
  {%- if php_version >= '7.0' %}
    {%- set suhosin_ext = php.suhosin7_ext %}
    {%- set suhosin_name = 'suhosin7' %}
    {%- set suhosin_repo = php.suhosin7_repo %}
    {%- set tmppath = '/tmp/suhosin7' %}
  {%- else %}
    {%- set suhosin_ext = php.suhosin5_ext %}
    {%- set suhosin_name = 'suhosin' %}
    {%- set suhosin_repo = php.suhosin5_repo %}
    {%- set tmppath = '/tmp/suhosin5' %}
  {%- endif %}
{%- elif salt['grains.get']('os_family') == "RedHat" %}
  {%- if grains['osmajorrelease'] == "7" %}
    {%- set suhosin_ext = php.suhosin5_ext %}
    {%- set suhosin_name = 'suhosin' %}
    {%- set suhosin_repo = php.suhosin5_repo %}
    {%- set tmppath = '/tmp/suhosin5' %}
  {%- else %}
    {# RHEL version 6 contains PHP 5.3, which is not supported by Suhosin #}
  {%- endif %}
{%- else %}
    {%- set suhosin_ext = php.suhosin5_ext %}
    {%- set suhosin_name = 'suhosin' %}
    {%- set suhosin_repo = php.suhosin5_repo %}
    {%- set tmppath = '/tmp/suhosin5' %}
{%- endif %}

build-pkgs:
  pkg.installed:
    - pkgs: {{ php.build_pkgs }}

git:
  pkg.installed: []

suhosin-source:
  git.latest:
    - name: {{ suhosin_repo }}
    - target: {{ tmppath }}
    - unless:
      - test -d {{ tmppath }}
    - require:
      - pkg: git

install-suhosin:
  cmd.run:
    - name: |
        phpize
        ./configure
        make
        make install
    - cwd: {{ tmppath }}
    - shell: /bin/bash
    - runas: root
    - unless:
      - test -e {{ php.ext_conf_path }}/{{ suhosin_name }}.ini
    - require:
      - pkg: build-pkgs
      - git: suhosin-source

php-suhosin-conf:
  file.managed:
    - name: {{ php.ext_conf_path }}/{{ suhosin_name }}.ini
    - contents: |
        extension={{ suhosin_ext }}
        suhosin.executor.include.whitelist=phar
    - require:
      - pkg: {{ php.php_pkg }}
      - cmd: install-suhosin
    - unless:
      - test -e {{ php.ext_conf_path }}/{{ suhosin_name }}.ini

{%- if salt['grains.get']('os_family') == "Debian" %}

php-suhosin-enable:
  cmd.run:
    - name: {{ php.phpenmod_command }} {{ suhosin_name }}
    - require:
      - file: php-suhosin-conf

{%- endif %}