Should httpd-devel be removed for security?

[jols]

We have installed httpd-devel on a few servers to facilitate installations, and now I read this:

"I removed httpd-devel and all of the dependencies that were installed with it... as I don't like to have a compiler on a webserver... as that can be used by hackers to compile their own kits if they find a way to exploit apache or some bad PHP code. The contents of /var/log/yum.log comes in handy for reversing things. "

Is this statement True? False? Maybe?

[cPanelDavidL]

We have installed httpd-devel on a few servers to facilitate installations, and now I read this:

"I removed httpd-devel and all of the dependencies that were installed with it... as I don't like to have a compiler on a webserver... as that can be used by hackers to compile their own kits if they find a way to exploit apache or some bad PHP code. The contents of /var/log/yum.log comes in handy for reversing things. "

Is this statement True? False? Maybe?

Hello!

Please do remove this. Any httpd rpms / packages put in place will cause conflicts with Easy Apache 3.

No need for any http or php based rpms to ever be installed manually - Easy Apache will take care of any and all building and security concerns that you may have.

As always if you do have specific concerns you wish for us to address - please do feel free to contact us via any channel to have those inquiries addressed one-by-one.

Thank you!