57 Commits

Author SHA1 Message Date
steffen@stelas.de
35091c0926 main/apache2: recompile broken suEXEC
Fixing two issues regarding suEXEC:
- suEXEC compiles with correct Apache user
- set docroot to /var/www - needed for virtual hosts

ref #5500
2016-04-27 13:45:17 +00:00
Przemyslaw Pawelczyk
0f920d3abe main/[various]: bump pkgrel for pre-install fixes 2016-04-25 07:11:16 +00:00
Przemyslaw Pawelczyk
da4e96aace Reorder arguments passed to addgroup/adduser in scripts.
Now all invocations have following order of arguments (if present):

    addgroup -S -g ... GROUP
    adduser -S -u ... -D -H -h ... -s ... -G ... -g ... USER
2016-04-25 06:56:47 +00:00
Przemyslaw Pawelczyk
a60b9f07de Improve consistency of scripts using adduser/addgroup.
Following rules have been applied:
- script starts with shebang !#/bin/sh followed by blank line,
- script ends with exit 0 prepended by blank line,
- only stderr of adduser, addgroup or passwd is redirected to /dev/null,
- getent passwd/group instances has been removed,
- manual checking of file and group existence has been removed,
- `|| true` instances has been removed.

Comments and line wrapping have been preserved.
2016-04-25 06:55:43 +00:00
Przemyslaw Pawelczyk
a593d306c9 Add -g option (GECOS/comment) to adduser in scripts.
This way we can avoid ugly default:

    Linux user,,,
2016-04-25 06:54:18 +00:00
Przemyslaw Pawelczyk
ccc056dbf9 Add lacking -S option (system) to adduser/addgroup in scripts.
Groups and users created by packages shouldn't use high ids by default
(unless explicitly requested), to distinguish them from groups and users
created by administrators for humans.

Following 41 files lacked -S next to addgroup:
- community/sword/sword.pre-install
- main/amavisd-new/amavisd-new.pre-install
- main/chrony/chrony.pre-install
- main/cvechecker/cvechecker.pre-install
- main/dnsmasq/dnsmasq.pre-install
- main/freeradius/freeradius.pre-install
- main/gdnsd/gdnsd.pre-install
- main/haproxy/haproxy.pre-install
- main/haproxy/haproxy.pre-upgrade
- main/kamailio/kamailio.pre-install
- main/logcheck/logcheck.pre-install
- main/mlmmj/mlmmj.pre-install
- main/nrpe/nrpe.pre-install
- main/open-vm-tools/open-vm-tools.pre-install
- main/postgrey/postgrey.pre-install
- main/privoxy/privoxy.pre-install
- main/redis/redis.pre-install
- main/samba/winbind.pre-install
- main/sircbot/sircbot.pre-install
- main/smokeping/smokeping.pre-install
- main/squark/squark.post-install
- main/squid/squid.pre-install
- main/squid/squid.pre-upgrade
- main/subversion/subversion.pre-install
- main/trac/trac.pre-install
- main/vsftpd/vsftpd.pre-install
- main/zabbix/zabbix-agent.pre-install
- testing/3proxy/3proxy.pre-install
- testing/cluster-glue/cluster-glue.pre-install
- testing/elasticsearch/elasticsearch.pre-install
- testing/emby/emby.pre-install
- testing/gdnsd/gdnsd.pre-install
- testing/icinga2/icinga2.pre-install
- testing/lusca/lusca.pre-install
- testing/lusca/lusca.pre-upgrade
- testing/mongodb/mongodb.pre-install
- testing/openxcap/openxcap.pre-install
- testing/prosody/prosody.pre-install
- testing/rancid/rancid.pre-install
- testing/rutorrent/rutorrent.pre-install
- testing/zabbix/zabbix-agent.pre-install

Following 60 files lacked -S next to adduser:
- community/caddy/caddy.pre-install
- community/domoticz/domoticz.pre-install
- community/minetest/minetest-server.pre-install
- community/oscam/oscam.pre-install
- community/seafile/seafile-server.pre-install
- community/syncthing/syncthing.pre-install
- main/apache2/apache2.pre-install
- main/aports-build/aports-build.pre-install
- main/atheme-iris/atheme-iris.pre-install
- main/bind/bind.pre-install
- main/clamav/clamav-db.pre-install
- main/clamsmtp/clamsmtp.pre-install
- main/clamsmtp/clamsmtp.pre-upgrade
- main/coova-chilli/coova-chilli.pre-install
- main/cvechecker/cvechecker.pre-install
- main/dhcp/dhcp.pre-install
- main/distcc/distcc.pre-install
- main/djbdns/dnscache.pre-install
- main/djbdns/tinydns.pre-install
- main/dovecot/dovecot.pre-install
- main/ez-ipupdate/ez-ipupdate.pre-install
- main/fetchmail/fetchmail.pre-install
- main/freeswitch/freeswitch.pre-install
- main/gitolite/gitolite.pre-install
- main/gnats/gnats.pre-install
- main/gross/gross.pre-install
- main/icecast/icecast.pre-install
- main/kamailio/kamailio.pre-install
- main/lighttpd/lighttpd.pre-install
- main/mariadb/mariadb.pre-install
- main/memcached/memcached.pre-install
- main/ngircd/ngircd.pre-install
- main/nrpe/nrpe.pre-install
- main/openntpd/openntpd.pre-install
- main/postgrey/postgrey.pre-install
- main/snort/snort.pre-install
- main/squid/squid.pre-install
- main/squid/squid.pre-upgrade
- main/subversion/subversion.pre-install
- main/trac/trac.pre-install
- main/transmission/transmission-daemon.pre-install
- main/ympd/ympd.pre-install
- main/znc/znc.pre-install
- testing/at/at.pre-install
- testing/buildbot-slave/buildbot-slave.pre-install
- testing/buildbot/buildbot.pre-install
- testing/clapf/clapf.pre-install
- testing/cluster-glue/cluster-glue.pre-install
- testing/dbmail/dbmail.pre-install
- testing/dspam/dspam.pre-install
- testing/ejabberd/ejabberd.pre-install
- testing/emby/emby.pre-install
- testing/mongodb/mongodb.pre-install
- testing/opensips/opensips.pre-install
- testing/pdns/pdns.pre-install
- testing/prosody/prosody.pre-install
- testing/qpage/qpage.pre-install
- testing/rrdbot/rrdbot.pre-install
- testing/wt/wt.pre-install
- unmaintained/ejabberd-git/ejabberd-git.pre-install
2016-04-25 06:53:54 +00:00
Przemyslaw Pawelczyk
694ace841f Reorder options passed to addgroup in scripts: make -S first.
It's only for consistency and to ease spotting lack of it.
2016-04-25 06:51:49 +00:00
Kaarle Ritvanen
701b5621b4 main/apache2: upgrade to 2.4.18 2016-02-15 21:48:50 +02:00
Kaarle Ritvanen
6eeb5be5d8 main/apache2: fix indented LoadModule paths 2016-02-15 17:34:22 +02:00
Kaarle Ritvanen
f77b6cf7f0 main/apache2: fix module paths in dav.conf, ssl.conf 2016-02-15 15:57:58 +02:00
Kaarle Ritvanen
7f599c2b5a main/apache2: log directory permissions 2016-02-04 20:32:23 +02:00
Kaarle Ritvanen
b265647eea main/apache2: remove LoadModule directives of separately packaged modules 2015-12-15 14:00:28 +02:00
Kaarle Ritvanen
81b1706c0f main/apache2: fix module configuration 2015-12-15 12:24:55 +02:00
Kaarle Ritvanen
dfb1e11b9e main/apache2: base configuration on upstream default files 2015-12-15 11:31:36 +02:00
Kaarle Ritvanen
67359861d9 main/apache2: rebuild to fix symlink-based dependencies 2015-12-04 17:47:27 +02:00
Valery Kartel
5ae6da4077 main/apache2: upgrade to 2.4.17, +some cleanups 2015-11-04 10:31:16 +00:00
Natanael Copa
3b099d54c6 main/apache2: upgrade to 2.4.16 2015-07-21 06:56:10 +00:00
Francesco Colista
6be6d78ca4 main/apache2: create users apache and make apache beloning to www-data 2015-07-21 06:35:29 +00:00
Kaarle Ritvanen
a5dafdc176 main/apache2: add missing dependency (libxml2-dev) 2015-05-26 19:11:32 +03:00
Kaarle Ritvanen
72f8cfc676 main/apache2: remove SSLMutex directive from ssl.conf
directive no longer supported in 2.4
2015-05-26 17:23:35 +03:00
Natanael Copa
6bf81f56e8 main/*: replace all sbin/runscript with sbin/openrc-run 2015-04-28 14:34:51 +00:00
Natanael Copa
20267efb77 main/apache2: upgrade to 2.4.12 2015-03-31 14:32:13 +00:00
ScrumpyJack
1087cdb23b main/apache2: added suid option in APKBUILD 2014-11-06 00:12:33 +01:00
Natanael Copa
43c3149714 main/apache2: upgrade to 2.4.10 2014-07-21 09:36:26 +00:00
Natanael Copa
f1567df936 main/apache2: rebuild against apr-1.5 for MPM event
and make sure we have all MPMs we expect.

fixes #2866

(cherry picked from commit 6f8960df9ea8a93aeee3ec3683d1aca3fd1f7280)
2014-05-06 09:54:52 +00:00
Natanael Copa
14337ff7b7 main/apache2: upgrade to 2.4.9 2014-03-21 14:26:50 +00:00
Natanael Copa
8e5944f064 main/apache2: upgrade to 2.4.7 2013-11-25 13:22:49 +00:00
Fabian Affolter
7e58002839 main/apache2: specify license 2013-10-31 12:07:12 +00:00
Natanael Copa
435459d677 main/apache2: fix typo in pre-upgrade trigger script 2013-10-30 10:58:13 +00:00
Natanael Copa
71f74b583d main/apache2: add www-data group if its missing
ref #2245
2013-10-28 12:07:25 +00:00
Natanael Copa
fdf3979419 main/apache2: create pid dir at startup. ignore missing conf.d/*.conf
ref #2171
2013-08-06 06:21:05 +00:00
Timo Teräs
5c90471732 [all autotools packages]: normalize ./configure 2013-07-30 08:54:53 +00:00
Natanael Copa
c10937c264 main/apache2: upgrade to 2.4.6 2013-07-22 12:48:02 +00:00
Natanael Copa
23b112fa0b main/apache2: fix deps for apache2-ldap
it needs apr-util-ldap

ref #2085
2013-06-18 13:50:26 +00:00
Natanael Copa
46cc4b49ea main/apache2: upgrade to 2.4.4 2013-02-27 08:53:30 +00:00
Natanael Copa
b1638039e2 main/apache2: fix default conf and split some mods
- New default config based on V Krishn's work.
- split out lua mod as it pulls in lua package as dependency
- split out proxy-html as it pulls in libxml2
- split out proxy as most ppl probably dont need it
- fix webdav package

Fixes #1457
2012-11-01 21:24:15 +00:00
Leonardo Arena
76761100c4 main/apache2: enable WebDAV support 2012-10-02 06:13:15 +00:00
Natanael Copa
0b4ebd1883 main/apache2: upgrade to 2.4.3 2012-08-16 12:50:06 +00:00
Natanael Copa
bb9bbcea20 main/apache2: rebuild against pcre-8.30 2012-03-12 20:48:02 +00:00
Natanael Copa
400a302e8b main/apache2: security upgrade to 2.2.22 (CVE-2012-0021, CVE-2012-0031, CVE-2012-0053, CVE-2011-3368)
low: mod_log_config crash CVE-2012-0021
low: scoreboard parent DoS CVE-2012-0031
moderate: error responses can expose cookies CVE-2012-0053
moderate: mod_proxy reverse proxy exposure CVE-2011-3368

This release also include the previosly patched:
low: mod_setenvif .htaccess privilege escalation CVE-2011-3607
moderate: mod_proxy reverse proxy exposure CVE-2011-4317

fixes #982
2012-02-01 07:39:22 +00:00
Natanael Copa
b82ce814e1 main/apache2: upgrade to 2.2.22 2012-02-01 07:21:51 +00:00
Natanael Copa
e2e255c038 main/apache2: security fix (CVE-2011-3607)
fixes #970
2012-01-31 13:41:06 +00:00
Natanael Copa
c739506cea main/apache2: replace opts in init.d script
ref #943
2012-01-19 08:55:00 +00:00
Leonardo Arena
9f987f8ab1 main/apache2: security hotfix #844 (CVE-2011-4317) 2011-11-28 12:00:58 +00:00
Natanael Copa
4f003493b9 main/apache2: upgrade to 2.2.21 2011-09-13 08:03:10 +00:00
Natanael Copa
169b985e5d main/apache2: add missing patch 2011-09-02 12:41:23 +00:00
Natanael Copa
14d8b3ce0d main/apache2: security upgrade to 2.2.20 (CVE-2011-3192) 2011-09-02 12:39:11 +00:00
Matt Smith
372152dda6 main/apache2: bumped pkgrel, see git log
Bumped pkgrel; should be built against the previous main/apr, and main/apr-util
updates.

See #504
2011-01-14 11:44:12 -06:00
William Pitcock
ba2600dc6e Set all packages with arch="x86 x86_64" to arch="all". 2011-01-13 06:06:02 -06:00
Matt Smith
a66560f1b4 main/apache2: improved APKBUILD 2011-01-09 11:51:04 +00:00