Merge pull request #13054 from micmac1/apa2446-19.07
[19.07] apache: security bump to 2.4.46
This commit is contained in:
commit
e6cad65f09
4 changed files with 28 additions and 16 deletions
|
@ -14,8 +14,7 @@ PKG_RELEASE:=2
|
|||
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2
|
||||
PKG_SOURCE_URL:=@APACHE/apr/
|
||||
PKG_HASH:=d3e12f7b6ad12687572a3a39475545a072608f4ba03a6ce8a3778f607dd0035b
|
||||
PKG_MAINTAINER:=Thomas Heil <heil@terminal-consulting.de>, \
|
||||
Sebastian Kemper <sebastian_ml@gmx.net>
|
||||
PKG_MAINTAINER:=Thomas Heil <heil@terminal-consulting.de>
|
||||
|
||||
PKG_LICENSE:=Apache-2.0
|
||||
PKG_LICENSE_FILES:=LICENSE
|
||||
|
|
|
@ -15,8 +15,7 @@ PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2
|
|||
PKG_SOURCE_URL:=@APACHE/apr/
|
||||
PKG_HASH:=e2e148f0b2e99b8e5c6caa09f6d4fb4dd3e83f744aa72a952f94f5a14436f7ea
|
||||
|
||||
PKG_MAINTAINER:=Thomas Heil <heil@terminal-consulting.de>, \
|
||||
Sebastian Kemper <sebastian_ml@gmx.net>
|
||||
PKG_MAINTAINER:=Thomas Heil <heil@terminal-consulting.de>
|
||||
|
||||
PKG_LICENSE:=Apache-2.0
|
||||
PKG_LICENSE_FILES:=LICENSE
|
||||
|
|
|
@ -8,18 +8,17 @@
|
|||
include $(TOPDIR)/rules.mk
|
||||
|
||||
PKG_NAME:=apache
|
||||
PKG_VERSION:=2.4.43
|
||||
PKG_VERSION:=2.4.46
|
||||
PKG_RELEASE:=1
|
||||
PKG_SOURCE_NAME:=httpd
|
||||
|
||||
PKG_SOURCE:=$(PKG_SOURCE_NAME)-$(PKG_VERSION).tar.bz2
|
||||
PKG_SOURCE_URL:=@APACHE/httpd/
|
||||
PKG_HASH:=a497652ab3fc81318cdc2a203090a999150d86461acff97c1065dc910fe10f43
|
||||
PKG_HASH:=740eddf6e1c641992b22359cabc66e6325868c3c5e2e3f98faf349b61ecf41ea
|
||||
|
||||
PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_SOURCE_NAME)-$(PKG_VERSION)
|
||||
|
||||
PKG_MAINTAINER:=Thomas Heil <heil@terminal-consulting.de>, \
|
||||
Sebastian Kemper <sebastian_ml@gmx.net>
|
||||
PKG_MAINTAINER:=Thomas Heil <heil@terminal-consulting.de>
|
||||
PKG_LICENSE:=Apache-2.0
|
||||
PKG_LICENSE_FILES:=LICENSE
|
||||
|
||||
|
@ -264,12 +263,9 @@ endif
|
|||
ifneq ($(CONFIG_PACKAGE_apache-mod-suexec)$(CONFIG_PACKAGE_apache-suexec),)
|
||||
CONFIGURE_ARGS+= \
|
||||
--enable-suexec \
|
||||
--with-suexec-bin=/usr/sbin/suexec \
|
||||
--with-suexec-bin=/usr/lib/apache2/suexec_dir/suexec \
|
||||
--with-suexec-caller=apache \
|
||||
--with-suexec-docroot=/var/www \
|
||||
--with-suexec-logfile=/var/log/apache2/suexec.log \
|
||||
--with-suexec-uidmin=99 \
|
||||
--with-suexec-gidmin=99
|
||||
--with-suexec-logfile=/var/log/apache2/suexec.log
|
||||
else
|
||||
CONFIGURE_ARGS+= \
|
||||
--disable-suexec
|
||||
|
@ -349,8 +345,9 @@ define Package/apache-icons/install
|
|||
endef
|
||||
|
||||
define Package/apache-suexec/install
|
||||
$(INSTALL_DIR) $(1)/usr/sbin
|
||||
$(CP) $(PKG_INSTALL_DIR)/usr/sbin/suexec $(1)/usr/sbin
|
||||
$(INSTALL_DIR) -m0750 $(1)/usr/lib/apache2/suexec_dir
|
||||
$(INSTALL_SUID) $(PKG_INSTALL_DIR)/usr/sbin/suexec \
|
||||
$(1)/usr/lib/apache2/suexec_dir
|
||||
endef
|
||||
|
||||
define Package/apache-utils/install
|
||||
|
@ -360,6 +357,22 @@ define Package/apache-utils/install
|
|||
$(1)/usr/sbin
|
||||
endef
|
||||
|
||||
# Directory "suexec_dir" is installed with '-m0750' above and contains
|
||||
# SUID binary "suexec". Below post-install script changes the group of
|
||||
# "suexec_dir" to apache, so user apache can access the folder (and the
|
||||
# SUID binary). The script only changes the group if the directory is
|
||||
# currently owned by "root:root".
|
||||
define Package/apache-suexec/postinst
|
||||
#!/bin/sh
|
||||
if [ -z "$${IPKG_INSTROOT}" ]; then
|
||||
dir="/usr/lib/apache2/suexec_dir"
|
||||
if ! [ -L "$$dir" ] && [ -d "$$dir" ] && [ -O "$$dir" ] && [ -G "$$dir" ]; then
|
||||
chown :apache "$$dir"
|
||||
fi
|
||||
fi
|
||||
exit 0
|
||||
endef
|
||||
|
||||
define Package/apache/Module
|
||||
define Package/apache-mod-$(1)
|
||||
$(call Package/apache/Default)
|
||||
|
|
|
@ -11,7 +11,8 @@ restart() {
|
|||
}
|
||||
|
||||
start() {
|
||||
mkdir -p /var/log/apache2 /var/run/apache2
|
||||
mkdir -p -m 0750 /var/log/apache2
|
||||
mkdir -p /var/run/apache2
|
||||
apachectl -k start
|
||||
}
|
||||
|
||||
|
|
Loading…
Reference in a new issue