Commits
- Commit:
6edcfca97fb01418cfdb8a2595060a63b7471d48
- From:
- Omar Polo <op@omarpolo.com>
- Date:
try to preserve as much as possible CFLAGS and LDFLAGS from env
but still try to autodetect with pkg-config if they aren't provided.
Passing CFLAGS/LDFLAGS from the command line will still override the
guessed ones.
- Commit:
eb877bffaa6b188caf0f8fc75a89f8e4721cc167
- From:
- Omar Polo <op@omarpolo.com>
- Date:
explain the OpenBSD bit
- Commit:
ca3f67564ce8ef5fe32e10084445edc56b4adeaa
- From:
- Omar Polo <op@omarpolo.com>
- Date:
don't log too much by default
- Commit:
fb4102a5ffdf34311e88a8c0ac6712546482f09d
- From:
- Omar Polo <op@omarpolo.com>
- Date:
test macro expansion too
- Commit:
3759d3eb56e899a8982c7e7df9555842b398b9b6
- From:
- Omar Polo <op@omarpolo.com>
- Date:
show macro usage in the example
- Commit:
7700ab07d3a97459e8d294f0ee672d7eaed67b85
- From:
- Omar Polo <op@omarpolo.com>
- Date:
fmt
- Commit:
59c7ee13b474c7929914075b01cd3593b1beaca7
- From:
- Omar Polo <op@omarpolo.com>
- Date:
fmt
- Commit:
090b8a89faa34cdc41c41e32845f1f5b444536e4
- From:
- Omar Polo <op@omarpolo.com>
- Date:
gracefully shut down fastcgi backends
we need to delete the events associated with the backends, otherwise
the server process won't ever quit.
Here, we add a pending counter to every backend and shut down
immediately if they aren't handling any client; otherwise we try to
close them as soon as possible (i.e. when they close the connection to
the last connected client.)
- Commit:
ea976e8743ad3b3263faae00d88e40bcf727097d
- From:
- Omar Polo <op@omarpolo.com>
- Date:
don't let CGI scripts inherit our stderr
our stderr could have been sent to the logger process, so it may be
invalid. Furthermore, in the future we may want to capture also the
stderr of the processes.
- Commit:
ef945cf4157bc8239c6da682a89ba60b11cc0e26
- From:
- Omar Polo <op@omarpolo.com>
- Date:
reset fcgi array in free_config
otherwise path, port and/or prog could become an invalid pointer.
- Commit:
4aa1dd553a8919c61136f8ed7cc775017f628769
- From:
- Omar Polo <op@omarpolo.com>
- Date:
typo
- Commit:
b24021d4a27ec5311490ee51b42dc2dacb18aa23
- From:
- Omar Polo <op@omarpolo.com>
- Date:
fix seccomp filter for ppc64le
before we matched ppc64le as ppc64 (which is big ending I presume), so
the seccomp filter would always kill gmid
#4 related
- Commit:
7322a054f5c434f957d996b0db6994c78b7773a0
- From:
- Omar Polo <op@omarpolo.com>
- Date:
use -subj /CN=name when generating the keys for the tests
`printf | openssl` is ugly :/
- Commit:
8bb8cf2ad488151879b1d7e5ec7436d38553b1b5
- From:
- Omar Polo <op@omarpolo.com>
- Date:
configure: add --disable-sandbox
Calling `configure' with --disable-sandbox will disable the sandbox
support *completely* at compile time. gmid will still complain at
compile time and during the startup.
Users shouldn't disable the sandbox if possible, but instead report
problem upstream so they get fixed (hopefully.)
#4 related
- Commit:
137def5ff4c0f9720391ca88191cf9fee6d8ae9a
- From:
- Omar Polo <op@omarpolo.com>
- Date:
reworked seccomp filter
* SECCOMP_AUDIT_ARCH extended to support more architectures
* relax fcntl policy: allow the syscall regardless of the flags
* wrap every syscall in a ifdef, and add some (statx, fcntl64, ...)
used in x86
Some bits were taken from dhcpcd[0], thanks!
#4 related
[0]: https://roy.marples.name/git/dhcpcd/blob/HEAD:/src/privsep-linux.c