> > Sadly enough, enough people are using open_basedir and trusting it...

Can we add our own configuration like allow_open_basedir and have it 
disable any non-NULL open_basedir by default? But maybe not as that may 
break existing scripts.

Also do we have http://www.hardened-php.net/suhosin/index.html .. I see 
it is in pkgsrc-wip but don't know if complete.