Commit Graph

26 Commits

Author SHA1 Message Date
d4d90bdf0a suEXEC: Add Suexec directive to disable suEXEC without renaming the
binary (Suexec Off), or force startup failure if suEXEC is required
but not supported (Suexec On).  Change SuexecUserGroup to fail 
startup instead of just printing a warning if suEXEC is disabled.

Additionally, ap_unixd_config.suexec_disabled_reason has a message,
suitable for logging/messaging, explaining why the feature isn't
available.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1033519 13f79535-47bb-0310-9956-ffa450edef68
2010-11-10 15:34:43 +00:00
ebb62867fb Use the new APLOG_USE_MODULE/AP_DECLARE_MODULE macros everywhere to take
advantage of per-module loglevels


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@951895 13f79535-47bb-0310-9956-ffa450edef68
2010-06-06 16:59:50 +00:00
96c72f1063 Treat gid's identically to uid's for purposes of numeric formatting.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@816388 13f79535-47bb-0310-9956-ffa450edef68
2009-09-17 21:35:04 +00:00
60fbe11de1 Bring back OS/2 support.
Reverses r758929 with a little bit of conflict resolution.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@807930 13f79535-47bb-0310-9956-ffa450edef68
2009-08-26 08:56:13 +00:00
777f02ed58 Correctly set suexec_enabled when httpd is run by non-root
PR 42175


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@791337 13f79535-47bb-0310-9956-ffa450edef68
2009-07-05 23:10:30 +00:00
a1908585a8 Core can specify a platform-specific rewrite args hook. Use that on Unix.
Windows continues to specify this in the MPM, at least until someone
can separate out the MPM-specific bits.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@759699 13f79535-47bb-0310-9956-ffa450edef68
2009-03-29 14:41:02 +00:00
301f0404f5 axe unmaintained 1.3-era code to support AUX, SunOS, IRIX, Next, Tandem, MPE,
LynxOS, QNX, and UnixWare


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@758944 13f79535-47bb-0310-9956-ffa450edef68
2009-03-27 00:32:22 +00:00
cb8a82faed remove TPF support
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@758936 13f79535-47bb-0310-9956-ffa450edef68
2009-03-27 00:05:18 +00:00
ee32468a33 remove OS/2 platform support
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@758929 13f79535-47bb-0310-9956-ffa450edef68
2009-03-26 23:47:52 +00:00
c7266edf61 The rewrite-args hook isn't available to MPM DSOs. Piggy-back on the
linked-in mod_unixd.c to handle that.

(The set of MPMs modified is the same set for which mod_unixd is enabled,
which is approximately equivalent to the set of Unix MPMs which anybody has
tried to maintain in recent memory.)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@758278 13f79535-47bb-0310-9956-ffa450edef68
2009-03-25 14:50:24 +00:00
7720a70dc4 axe the remaining checks of AP_MPM_WANT_foo to see what code to generate
MPMs no longer provide those definitions

(the signal server support is an interesting problem, since it has to be known before loading
loading the MPM)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@758014 13f79535-47bb-0310-9956-ffa450edef68
2009-03-24 20:52:10 +00:00
736d659de0 use a local module header file to store the function prototype
for ap_unixd_setup_child() that is used outside this module.



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@739487 13f79535-47bb-0310-9956-ffa450edef68
2009-01-31 01:46:56 +00:00
2288718073 name protect unixd_setup_child and restore its prototype to unixd.h
If someone wants to find a better place for it, then feel free to
so so only if you compile with -Werror before committing.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@739151 13f79535-47bb-0310-9956-ffa450edef68
2009-01-30 02:51:32 +00:00
a73acf02f6 API Cleanup in preperation for 2.4.x, make sure all exported functions or variables contain an ap_ prefix.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@722399 13f79535-47bb-0310-9956-ffa450edef68
2008-12-02 08:13:36 +00:00
993bbf6f45 Remove c99 style comment.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@721763 13f79535-47bb-0310-9956-ffa450edef68
2008-11-30 05:49:23 +00:00
68512c237c Note that the current mishmash is ugly... hope to
find time to restart working on the cleanup I started
at ACUS, but got sidetracked with confusion on where the
divisions actually were...


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@720017 13f79535-47bb-0310-9956-ffa450edef68
2008-11-23 17:55:32 +00:00
0d1be6231d mod_unixd: use APR_HOOK_MIDDLE for drop_privileges.
We're the canonical module for that hook!


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@712347 13f79535-47bb-0310-9956-ffa450edef68
2008-11-08 03:18:13 +00:00
701bb560f9 * Move code to a more conveniant place
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@711227 13f79535-47bb-0310-9956-ffa450edef68
2008-11-04 11:35:21 +00:00
368d9bb335 Further unixd hacks to remove duplication between old-unixd and mod_unixd,
and get it working with old MPMS[1] + mod_unixd.  It's still an uneasy
split, as some modules (mod_cgid, suexec)[2] also use unixd.
More thinking+hacking due.

[1] Should be prefork/worker/event, but only worker is tested.
[2] cgid is OK, suexec is untested.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@711146 13f79535-47bb-0310-9956-ffa450edef68
2008-11-04 00:44:56 +00:00
a1252f96e3 Wrap the global count of privileges handlers operating. Silence grumblers.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@710037 13f79535-47bb-0310-9956-ffa450edef68
2008-11-03 11:37:03 +00:00
72119d92f5 Switch all unix MPMs to use drop_privileges hook (mod_unixd) for startup
and add a flag to prevent running without any module taking responsibility
for managing system privileges!


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@709993 13f79535-47bb-0310-9956-ffa450edef68
2008-11-03 00:46:54 +00:00
83c28b52fe Maintain the assumption that uids are long (as is done
with other code sections), as well as be aware of
signs.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@709406 13f79535-47bb-0310-9956-ffa450edef68
2008-10-31 13:35:46 +00:00
f3ae98d6b2 Make unixd_set_user a local static function.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@709238 13f79535-47bb-0310-9956-ffa450edef68
2008-10-30 20:29:28 +00:00
08dddebd7c Change the child_init hook to a drop_privileges hook for mod_unixd.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@709067 13f79535-47bb-0310-9956-ffa450edef68
2008-10-30 00:57:45 +00:00
0519c3836f Strip down mod_unixd to only do chroot and changing the UID.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@709058 13f79535-47bb-0310-9956-ffa450edef68
2008-10-30 00:36:39 +00:00
8715fd2622 Move mod_unixd to arch/unix.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@709050 13f79535-47bb-0310-9956-ffa450edef68
2008-10-30 00:08:58 +00:00