Package: php5 Version: 5.1.6-0.dotdeb.2 Severity: minor If your php script or application uses a different session.save_path without also setting session.gc_probability to non-zero, old sessions will not be deleted, since garbage colleciton won't run.
The comments around session.gc_divisor should be amended to make sys admins aware of this. Something along the lines of: ; This is disabled in the Debian packages, due to the strict permissions ; on /var/lib/php5. Instead of setting this here, see the cronjob at ; /etc/cron.d/php5, which uses the session.gc_maxlifetime setting below ; If your php scripts use their own session.save_path, either make sure they ; enable garbage collection by setting session.gc_probability or globally ; enable it here. -- System Information: Debian Release: testing/unstable APT prefers testing APT policy: (500, 'testing'), (500, 'stable') Architecture: amd64 (x86_64) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.16-2-em64t-p4-smp Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1) Versions of packages php5 depends on: ii libapache2-mod-php5 5.1.6-0.dotdeb.2 PHP 5 scripting language - apache ii php5-common 5.1.6-0.dotdeb.2 Common files for packages built fr php5 recommends no packages. -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
