]> git.ipfire.org Git - thirdparty/apache/httpd.git/commit
suexec: Support use of setgid/setuid capability bits on Linux, a
authorJoe Orton <jorton@apache.org>
Wed, 23 May 2012 21:38:39 +0000 (21:38 +0000)
committerJoe Orton <jorton@apache.org>
Wed, 23 May 2012 21:38:39 +0000 (21:38 +0000)
commitbeaee8f4e3a275badb8239bf798379e0a8ad5de0
treeaf9d06875cbd458486afdb8a67fc9320d8d026fd
parentc82d3e4180e7fbc0783f306b53c877a4ac2f2ba0
suexec: Support use of setgid/setuid capability bits on Linux, a
weaker set of privileges than the full setuid/setgid root binary.

* configure.in: Add --enable-suexec-capabilites flag.

* Makefile.in: If configured, use setcap instead of chmod 7555 on
  installed suexec binary.

* modules/arch/unix/mod_unixd.c (unixd_pre_config): Drop test for
  setuid bit if capability bits are used.

* docs/manual/: Add docs.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1342065 13f79535-47bb-0310-9956-ffa450edef68
CHANGES
Makefile.in
configure.in
docs/manual/suexec.html.en
modules/arch/unix/mod_unixd.c