]> git.ipfire.org Git - thirdparty/apache/httpd.git/commit
suexec: Support use of setgid/setuid capability bits on Linux, a
authorJoe Orton <jorton@apache.org>
Wed, 23 May 2012 21:38:39 +0000 (21:38 +0000)
committerJoe Orton <jorton@apache.org>
Wed, 23 May 2012 21:38:39 +0000 (21:38 +0000)
commitf2cf4c6832da9a3e830e25d9163e403e00e84a11
treeaf9d06875cbd458486afdb8a67fc9320d8d026fd
parent6acd3e199b5b0f69506f9e0f4f82c8859c7f228c
suexec: Support use of setgid/setuid capability bits on Linux, a
weaker set of privileges than the full setuid/setgid root binary.

* configure.in: Add --enable-suexec-capabilites flag.

* Makefile.in: If configured, use setcap instead of chmod 7555 on
  installed suexec binary.

* modules/arch/unix/mod_unixd.c (unixd_pre_config): Drop test for
  setuid bit if capability bits are used.

* docs/manual/: Add docs.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1342065 13f79535-47bb-0310-9956-ffa450edef68
CHANGES
Makefile.in
configure.in
docs/manual/suexec.html.en
modules/arch/unix/mod_unixd.c