Changeset 2591 for trunk/server/fedora/specs/httpd.spec.patch
- Timestamp:
- Aug 27, 2014, 10:06:17 PM (9 years ago)
- Location:
- trunk
- Files:
-
- 2 edited
Legend:
- Unmodified
- Added
- Removed
-
trunk
- Property svn:mergeinfo changed
-
trunk/server/fedora/specs/httpd.spec.patch
r2377 r2591 1 --- /tmp/httpd/httpd.spec.orig 2013-02-14 17:53:29.967176396 -05002 +++ /tmp/httpd/httpd.spec 2013-02-14 17:54:57.172521444 -05003 @@ - 9,7 +9,7 @@1 --- rpmbuild/SPECS/httpd.spec.~1~ 2014-07-23 06:24:15.000000000 -0400 2 +++ httpd.spec 2014-08-26 21:10:34.994027237 -0400 3 @@ -15,7 +15,7 @@ 4 4 Summary: Apache HTTP Server 5 5 Name: httpd 6 Version: 2. 2.236 Version: 2.4.10 7 7 -Release: 1%{?dist} 8 8 +Release: 1%{?dist}.scripts.%{scriptsversion} … … 10 10 Source0: http://www.apache.org/dist/httpd/httpd-%{version}.tar.bz2 11 11 Source1: index.html 12 @@ -57,6 +57,15 @@ 13 Requires(postun): systemd-units 14 Requires(post): systemd-units 15 12 @@ -65,6 +65,13 @@ 13 # Bug fixes 14 Patch55: httpd-2.4.4-malformed-host.patch 15 Patch56: httpd-2.4.4-mod_unique_id.patch 16 + 17 +Patch1001: httpd-suexec-scripts.patch 18 +Patch1002: httpd-mod_status-security.patch 19 +Patch1003: httpd-304s.patch 20 +Patch1004: httpd-fixup-vhost.patch 21 +Patch1005: httpd-allow-null-user.patch 22 + 23 License: ASL 2.0 24 Group: System Environment/Daemons 25 BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root 26 @@ -77,6 +84,7 @@ 27 Provides: webserver 28 Provides: mod_dav = %{version}-%{release}, httpd-suexec = %{version}-%{release} 29 Provides: httpd-mmn = %{mmn}, httpd-mmn = %{mmnisa}, httpd-mmn = %{oldmmnisa} 16 30 +Provides: scripts-httpd = %{version}-%{release} 17 +Patch1000: httpd-suexec-scripts.patch 18 +Patch1003: httpd-2.2.x-mod_status-security.patch 19 +Patch1004: httpd-2.2.x-304.patch 20 +Patch1005: httpd-2.2.x-mod_ssl-sessioncaching.patch 21 +Patch1006: httpd-suexec-cloexec.patch 22 +Patch1007: httpd-fixup-vhost.patch 23 +Patch1008: httpd-SSLCompression.patch 24 + 25 %description 26 The Apache HTTP Server is a powerful, efficient, and extensible 27 web server. 28 @@ -67,6 +76,7 @@ 31 Requires: httpd-tools = %{version}-%{release} 32 Requires(pre): /usr/sbin/useradd 33 Requires(preun): systemd-units 34 @@ -94,6 +102,7 @@ 29 35 Obsoletes: secureweb-devel, apache-devel, stronghold-apache-devel 30 36 Requires: apr-devel, apr-util-devel, pkgconfig … … 34 40 %description devel 35 41 The httpd-devel package contains the APXS binary and other files 36 @@ -1 05,6 +115,7 @@42 @@ -132,6 +141,7 @@ 37 43 Requires(post): openssl, /bin/cat 38 44 Requires(pre): httpd … … 42 48 43 49 %description -n mod_ssl 44 @@ -1 31,6 +142,14@@45 # Patch in vendor/release string46 sed "s/@RELEASE@/%{vstring}/" < %{PATCH20} | patch -p150 @@ -190,6 +200,12 @@ 51 %patch55 -p1 -b .malformedhost 52 %patch56 -p1 -b .uniqueid 47 53 48 +%patch1000 -p1 -b .scripts 49 +%patch1003 -p1 -b .permitstatus 50 +%patch1004 -p1 -b .scripts-304 51 +%patch1005 -p1 -b .ssl-sessioncache 52 +%patch1006 -p1 -b .cloexec 53 +%patch1007 -p1 -b .fixup-vhost 54 +%patch1008 -p1 -b .sslcompression 54 +%patch1001 -p1 -b .suexec-scripts 55 +%patch1002 -p1 -b .mod_status-security 56 +%patch1003 -p1 -b .scripts-304s 57 +%patch1004 -p1 -b .fixup-vhost 58 +%patch1005 -p1 -b .allow-null-user 55 59 + 56 # Safety check: prevent build if defined MMN does not equal upstream MMN. 57 vmmn=`echo MODULE_MAGIC_NUMBER_MAJOR | cpp -include include/ap_mmn.h | sed -n '/^2/p'` 58 if test "x${vmmn}" != "x%{mmn}"; then 59 @@ -191,10 +210,12 @@ 60 --with-apr=%{_prefix} --with-apr-util=%{_prefix} \ 60 # Patch in the vendor string 61 sed -i '/^#define PLATFORM/s/Unix/%{vstring}/' os/unix/os.h 62 63 @@ -242,11 +258,13 @@ 61 64 --enable-suexec --with-suexec \ 65 --enable-suexec-capabilities \ 62 66 --with-suexec-caller=%{suexec_caller} \ 63 - --with-suexec-docroot=%{contentdir} \ 67 - --with-suexec-docroot=%{docroot} \ 68 - --without-suexec-logfile \ 69 - --with-suexec-syslog \ 64 70 + --with-suexec-docroot=/ \ 65 71 + --with-suexec-userdir=web_scripts \ 66 72 + --with-suexec-trusteddir=/usr/libexec/scripts-trusted \ 67 --with-suexec-logfile=%{_localstatedir}/log/httpd/suexec.log \ 73 + --with-suexec-logfile=%{_localstatedir}/log/httpd/suexec.log \ 74 + --without-suexec-syslog \ 68 75 --with-suexec-bin=%{_sbindir}/suexec \ 69 76 - --with-suexec-uidmin=500 --with-suexec-gidmin=100 \ … … 71 78 --enable-pie \ 72 79 --with-pcre \ 73 $* 80 --enable-mods-shared=all \ 81 @@ -542,7 +560,8 @@ 82 %{_sbindir}/fcgistarter 83 %{_sbindir}/apachectl 84 %{_sbindir}/rotatelogs 85 -%caps(cap_setuid,cap_setgid+pe) %attr(510,root,%{suexec_caller}) %{_sbindir}/suexec 86 +# cap_dac_override needed to write to /var/log/httpd 87 +%caps(cap_setuid,cap_setgid,cap_dac_override+pe) %attr(510,root,%{suexec_caller}) %{_sbindir}/suexec 88 89 %dir %{_libdir}/httpd 90 %dir %{_libdir}/httpd/modules 91 @@ -1014,3 +1033,8 @@ 92 * Sun Apr 04 2010 Robert Scheck <robert@fedoraproject.org> - 2.2.15-1 93 - update to 2.2.15 (#572404, #579311) 94 95 +Patch1001: httpd-suexec-scripts.patch 96 +Patch1002: httpd-mod_status-security.patch 97 +Patch1003: httpd-304s.patch 98 +Patch1004: httpd-fixup-vhost.patch 99 +Patch1005: httpd-allow-null-user.patch
Note: See TracChangeset
for help on using the changeset viewer.