[2583] | 1 | --- rpmbuild/SPECS/httpd.spec.~1~ 2014-07-23 06:24:15.000000000 -0400 |
---|
| 2 | +++ httpd.spec 2014-08-26 21:10:34.994027237 -0400 |
---|
[2525] | 3 | @@ -15,7 +15,7 @@ |
---|
[926] | 4 | Summary: Apache HTTP Server |
---|
| 5 | Name: httpd |
---|
[2543] | 6 | Version: 2.4.10 |
---|
| 7 | -Release: 1%{?dist} |
---|
| 8 | +Release: 1%{?dist}.scripts.%{scriptsversion} |
---|
[926] | 9 | URL: http://httpd.apache.org/ |
---|
[1738] | 10 | Source0: http://www.apache.org/dist/httpd/httpd-%{version}.tar.bz2 |
---|
[926] | 11 | Source1: index.html |
---|
[2583] | 12 | @@ -65,6 +65,13 @@ |
---|
| 13 | # Bug fixes |
---|
| 14 | Patch55: httpd-2.4.4-malformed-host.patch |
---|
| 15 | Patch56: httpd-2.4.4-mod_unique_id.patch |
---|
| 16 | + |
---|
[2431] | 17 | +Patch1001: httpd-suexec-scripts.patch |
---|
| 18 | +Patch1002: httpd-mod_status-security.patch |
---|
| 19 | +Patch1003: httpd-304s.patch |
---|
| 20 | +Patch1004: httpd-fixup-vhost.patch |
---|
[2583] | 21 | +Patch1005: httpd-allow-null-user.patch |
---|
[2431] | 22 | + |
---|
[2583] | 23 | License: ASL 2.0 |
---|
| 24 | Group: System Environment/Daemons |
---|
| 25 | BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root |
---|
| 26 | @@ -77,6 +84,7 @@ |
---|
| 27 | Provides: webserver |
---|
| 28 | Provides: mod_dav = %{version}-%{release}, httpd-suexec = %{version}-%{release} |
---|
| 29 | Provides: httpd-mmn = %{mmn}, httpd-mmn = %{mmnisa}, httpd-mmn = %{oldmmnisa} |
---|
| 30 | +Provides: scripts-httpd = %{version}-%{release} |
---|
| 31 | Requires: httpd-tools = %{version}-%{release} |
---|
| 32 | Requires(pre): /usr/sbin/useradd |
---|
| 33 | Requires(preun): systemd-units |
---|
| 34 | @@ -94,6 +102,7 @@ |
---|
[2431] | 35 | Obsoletes: secureweb-devel, apache-devel, stronghold-apache-devel |
---|
| 36 | Requires: apr-devel, apr-util-devel, pkgconfig |
---|
| 37 | Requires: httpd = %{version}-%{release} |
---|
| 38 | +Provides: scripts-httpd-devel = %{version}-%{release} |
---|
| 39 | |
---|
| 40 | %description devel |
---|
| 41 | The httpd-devel package contains the APXS binary and other files |
---|
[2583] | 42 | @@ -132,6 +141,7 @@ |
---|
[2431] | 43 | Requires(post): openssl, /bin/cat |
---|
| 44 | Requires(pre): httpd |
---|
| 45 | Requires: httpd = 0:%{version}-%{release}, httpd-mmn = %{mmnisa} |
---|
| 46 | +Provides: scripts-mod_ssl |
---|
| 47 | Obsoletes: stronghold-mod_ssl |
---|
| 48 | |
---|
| 49 | %description -n mod_ssl |
---|
[2583] | 50 | @@ -190,6 +200,12 @@ |
---|
| 51 | %patch55 -p1 -b .malformedhost |
---|
| 52 | %patch56 -p1 -b .uniqueid |
---|
[2431] | 53 | |
---|
| 54 | +%patch1001 -p1 -b .suexec-scripts |
---|
| 55 | +%patch1002 -p1 -b .mod_status-security |
---|
| 56 | +%patch1003 -p1 -b .scripts-304s |
---|
| 57 | +%patch1004 -p1 -b .fixup-vhost |
---|
[2583] | 58 | +%patch1005 -p1 -b .allow-null-user |
---|
[2431] | 59 | + |
---|
[2583] | 60 | # Patch in the vendor string |
---|
| 61 | sed -i '/^#define PLATFORM/s/Unix/%{vstring}/' os/unix/os.h |
---|
| 62 | |
---|
| 63 | @@ -242,11 +258,13 @@ |
---|
[2431] | 64 | --enable-suexec --with-suexec \ |
---|
| 65 | --enable-suexec-capabilities \ |
---|
| 66 | --with-suexec-caller=%{suexec_caller} \ |
---|
| 67 | - --with-suexec-docroot=%{docroot} \ |
---|
| 68 | - --without-suexec-logfile \ |
---|
| 69 | - --with-suexec-syslog \ |
---|
| 70 | + --with-suexec-docroot=/ \ |
---|
| 71 | + --with-suexec-userdir=web_scripts \ |
---|
| 72 | + --with-suexec-trusteddir=/usr/libexec/scripts-trusted \ |
---|
| 73 | + --with-suexec-logfile=%{_localstatedir}/log/httpd/suexec.log \ |
---|
| 74 | + --without-suexec-syslog \ |
---|
| 75 | --with-suexec-bin=%{_sbindir}/suexec \ |
---|
| 76 | - --with-suexec-uidmin=500 --with-suexec-gidmin=100 \ |
---|
| 77 | + --with-suexec-uidmin=50 --with-suexec-gidmin=50 \ |
---|
| 78 | --enable-pie \ |
---|
| 79 | --with-pcre \ |
---|
| 80 | --enable-mods-shared=all \ |
---|
[2583] | 81 | @@ -542,7 +560,8 @@ |
---|
[2551] | 82 | %{_sbindir}/fcgistarter |
---|
| 83 | %{_sbindir}/apachectl |
---|
| 84 | %{_sbindir}/rotatelogs |
---|
| 85 | -%caps(cap_setuid,cap_setgid+pe) %attr(510,root,%{suexec_caller}) %{_sbindir}/suexec |
---|
| 86 | +# cap_dac_override needed to write to /var/log/httpd |
---|
| 87 | +%caps(cap_setuid,cap_setgid,cap_dac_override+pe) %attr(510,root,%{suexec_caller}) %{_sbindir}/suexec |
---|
| 88 | |
---|
| 89 | %dir %{_libdir}/httpd |
---|
| 90 | %dir %{_libdir}/httpd/modules |
---|
[2583] | 91 | @@ -1014,3 +1033,8 @@ |
---|
| 92 | * Sun Apr 04 2010 Robert Scheck <robert@fedoraproject.org> - 2.2.15-1 |
---|
| 93 | - update to 2.2.15 (#572404, #579311) |
---|
| 94 | |
---|
| 95 | +Patch1001: httpd-suexec-scripts.patch |
---|
| 96 | +Patch1002: httpd-mod_status-security.patch |
---|
| 97 | +Patch1003: httpd-304s.patch |
---|
| 98 | +Patch1004: httpd-fixup-vhost.patch |
---|
| 99 | +Patch1005: httpd-allow-null-user.patch |
---|