Changeset 1259 for trunk/server/common/patches

Timestamp:

Jul 9, 2009, 3:48:21 PM (15 years ago)

Author:

mitchb

Message:

Reintegrate branches/fc11-dev (r1121:1258) to trunk

Location:

trunk

Files:

• . (modified) (1 prop)
• server/common/patches/httpd-2.2.x-sni.patch (modified) (2 diffs)
• server/common/patches/httpd-suexec-scripts.patch (modified) (14 diffs)
• server/common/patches/openafs-delta-dprintf-rename-20090427.patch (copied) (copied from branches/fc11-dev/server/common/patches/openafs-delta-dprintf-rename-20090427.patch)
• server/common/patches/openafs-delta-linux26-defer-cred-changing-20090511.patch (copied) (copied from branches/fc11-dev/server/common/patches/openafs-delta-linux26-defer-cred-changing-20090511.patch)
• server/common/patches/openafs-numsysnames.patch (copied) (copied from branches/fc11-dev/server/common/patches/openafs-numsysnames.patch)
• server/common/patches/openafs-scripts.patch (modified) (1 diff)
• server/common/patches/openssh-4.7p1-gssapi-name-in-env.patch (copied) (copied from branches/fc11-dev/server/common/patches/openssh-4.7p1-gssapi-name-in-env.patch)

trunk/server/common/patches/httpd-2.2.x-sni.patch

@@ -971 +971 @@
 Index: httpd-2.2.11/docs/manual/mod/mod_ssl.html.en
 ===================================================================
---- httpd-2.2.11/docs/manual/mod/mod_ssl.html.en        (revision 768863)
-+++ httpd-2.2.11/docs/manual/mod/mod_ssl.html.en        (working copy)
+--- httpd-2.2.11/docs/manual/mod/mod_ssl.html.en        2008-08-20 19:02:48.000000000 -0400
++++ httpd-2.2.11/docs/manual/mod/mod_ssl.html.en        2009-06-03 05:33:23.000000000 -0400
 @@ -75,6 +75,7 @@ to provide the cryptography engine.</p>
  <li><img alt="" src="../images/down.gif" /> <a href="#sslrequiressl">SSLRequireSSL</a></li>
@@ -1026 +1026 @@
 +<p class="apache">Copyright 2009 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
  <p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="../faq/">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div>
- </body></html>
+-</body></html>
+\ No newline at end of file
++</body></html>

trunk/server/common/patches/httpd-suexec-scripts.patch

@@ -45 +45 @@
  APACHE_HELP_STRING(--with-suexec-docroot,SuExec root directory),[
    AC_DEFINE_UNQUOTED(AP_DOC_ROOT, "$withval", [SuExec root directory] ) ] )
---- httpd-2.2.2/support/suexec.c.old    2006-04-21 21:53:06.000000000 -0400
-+++ httpd-2.2.2/support/suexec.c        2007-05-22 10:32:04.000000000 -0400
+--- httpd-2.2.11/support/suexec.c.old   2008-11-30 10:47:31.000000000 -0500
++++ httpd-2.2.11/support/suexec.c       2009-06-08 09:02:17.000000000 -0400
 @@ -30,6 +30,9 @@
   *
@@ -57 +57 @@
  #include "ap_config.h"
  #include "suexec.h"
-@@ -46,6 +48,7 @@
+@@ -46,6 +49,7 @@
  #include <stdio.h>
  #include <stdarg.h>
@@ -65 +65 @@
  #ifdef HAVE_PWD_H
  #include <pwd.h>
-@@ -95,6 +98,7 @@
+@@ -95,6 +99,7 @@
  {
      /* variable name starts with */
@@ -146 +146 @@
      clean_env();
 +    setenv("JAVA_TOOL_OPTIONS", "-Xmx128M", 1); /* scripts.mit.edu local hack */
-
+ 
      prog = argv[0];
      /*
-@@ -350,6 +406,20 @@
+@@ -350,6 +414,20 @@
  #endif /*_OSD_POSIX*/
  
@@ -170 +170 @@
       * or attempts to back up out of the current directory,
       * to protect against attacks.  If any are
-@@ -371,6 +441,7 @@
+@@ -371,6 +449,7 @@
          userdir = 1;
      }
@@ -178 +178 @@
       * Error out if the target username is invalid.
       */
-@@ -450,7 +521,7 @@
+@@ -452,7 +531,7 @@
       * Error out if attempt is made to execute as root or as
       * a UID less than AP_UID_MIN.  Tsk tsk.
@@ -187 +187 @@
          exit(107);
      }
-@@ -482,6 +553,21 @@
+@@ -484,6 +563,21 @@
          log_err("failed to setuid (%ld: %s)\n", uid, cmd);
          exit(110);
@@ -209 +209 @@
      /*
       * Get the current working directory, as well as the proper
-@@ -504,6 +588,21 @@
+@@ -506,6 +600,21 @@
              log_err("cannot get docroot information (%s)\n", target_homedir);
              exit(112);
@@ -231 +231 @@
      else {
          if (((chdir(AP_DOC_ROOT)) != 0) ||
-@@ -530,15 +629,17 @@
+@@ -532,15 +641,17 @@
      /*
       * Error out if cwd is writable by others.
@@ -250 +250 @@
          exit(117);
      }
-@@ -546,10 +647,12 @@
+@@ -548,10 +659,12 @@
      /*
       * Error out if the program is writable by others.
@@ -263 +263 @@
      /*
       * Error out if the file is setuid or setgid.
-@@ -563,6 +666,7 @@
+@@ -565,6 +678,7 @@
       * Error out if the target name/group is different from
       * the name/group of the cwd or the program.
@@ -271 +271 @@
          (gid != dir_info.st_gid) ||
          (uid != prg_info.st_uid) ||
-@@ -574,12 +678,14 @@
+@@ -576,16 +690,33 @@
                  prg_info.st_uid, prg_info.st_gid);
          exit(120);
@@ -287 +287 @@
          exit(121);
      }
-@@ -606,6 +711,21 @@
-       exit(122);
-     }
  
 +    if (is_static_extension(cmd)) {
 +        argv[2] = STATIC_CAT_PATH;
 +        execv(STATIC_CAT_PATH, &argv[2]);
-+       log_err("(%d)%s: static_cat exec failed (%s)\n", errno, strerror(errno), argv[2]);
-+       exit(255);
++        log_err("(%d)%s: static_cat exec failed (%s)\n", errno, strerror(errno), argv[2]);
++        exit(255);
 +    }
 +    if (is_php_extension(cmd)) {
@@ -302 +299 @@
 +        argv[2] = "-f";
 +        execv(PHP_PATH, &argv[1]);
-+       log_err("(%d)%s: php exec failed (%s)\n", errno, strerror(errno), argv[2]);
-+       exit(255);
-+    }
-+
-     /*
-      * Execute the command, replacing our image with its own.
-      */
++        log_err("(%d)%s: php exec failed (%s)\n", errno, strerror(errno), argv[2]);
++        exit(255);
++    }
++
+ #ifdef AP_SUEXEC_UMASK
+     /*
+      * umask() uses inverse logic; bits are CLEAR for allowed access.

trunk/server/common/patches/openafs-scripts.patch

@@ -127 +127 @@
      short multiPage;           /* count of multi-page getpages in progress */
  #endif
-+    bool apache_access;                /* whether or not Apache has access to a file */
++    int apache_access;         /* whether or not Apache has access to a file */
  };