Commits
Commit:
d29a2ee2246e1b1b0c5222a823820e42422c894e
Author:
Omar Polo <op@omarpolo.com>
Date:
Tue Sep 6 16:11:09 2022 UTC
get rid of the CGI support

I really want to get rid of the `executor' process hack for CGI scripts
and its escalation to allow fastcgi and proxying to work on non-OpenBSD.

This drops the CGI support and the `executor' process entirely and is
the first step towards gmid 2.0. It also allows to have more secure
defaults.

On non-OpenBSD systems this means that the sandbox will be deactivated
as soon as fastcgi or proxying are used: you can't open sockets under
FreeBSD' capsicum(4) and I don't want to go thru the pain of making it
work under linux' seccomp/landlock. Patches are always welcome however.

For folks using CGI scripts (hey, I'm one of you!) not all hope is lost:
fcgiwrap or OpenBSD' slowcgi(8) are ways to run CGI scripts as they were
FastCGI applications.

fixes for the documentation and to the non-OpenBSD sandboxes will
follow.
Commit:
456a4c6b6e2d1e506816be64dfc7cb36ca0c822a
Author:
Omar Polo <op@omarpolo.com>
Date:
Tue Mar 29 12:25:18 2022 UTC
add a "contributing" section
Commit:
4252e62cad7a923226723cb2f0f054c12b89b3c2
Author:
Omar Polo <op@omarpolo.com>
Date:
Tue Mar 29 12:13:25 2022 UTC
"a posix libc" can be left implicit
Commit:
a68203f089038d253de90759aaf385f79d3ec861
Author:
Omar Polo <op@omarpolo.com>
Date:
Tue Mar 29 12:05:29 2022 UTC
remove docker section; it's already showed off in the contrib page
Commit:
ed78e81b9c19d27e0898b28f138f2536a286020d
Author:
Omar Polo <op@omarpolo.com>
Date:
Fri Feb 18 09:09:23 2022 UTC
remove paragraph "locally installed libressl" + some tweaks

libtls is now widely available, it's at least on gentoo, arch, void,
alpine, fedora and debian sid; there's no need to show how to compile to
a locally installed one.
Commit:
c3eb759a7906ba3661eff53a1eb660b768316723
Author:
Omar Polo <op@omarpolo.com>
Date:
Wed Dec 29 20:53:22 2021 UTC
mention the reverse proxying
Commit:
dcfdb969a267631fc9b787507c6ce6db7e290e48
Author:
Omar Polo <op@omarpolo.com>
Date:
Sun Oct 24 16:52:39 2021 UTC
don't list the exact pledge promises

It's easy to forgot to update the README after a code change (already
happened in the past) and they're easy to discover by reading
sandbox.c
Commit:
67c49bc5c794c4375344ea010be608572d6f0070
Author:
Omar Polo <op@omarpolo.com>
Date:
Sun Sep 19 17:08:12 2021 UTC
mention landlock in the README
Commit:
e58a447a28a416ee719a9e457bfc8160a9b0e771
Author:
Anna “CyberTailor” <cyber@sysrq.in>
Date:
Thu Jul 29 07:31:09 2021 UTC
gmid.1: document logging
Commit:
dbbfd0fb9fc9eb6541d54470691033aaf941f500
Author:
Omar Polo <op@omarpolo.com>
Date:
Sun Jul 11 20:58:57 2021 UTC
point to contrib.html
Commit:
be52e954c1d54f80485c643663db8e2ffc27510f
Author:
Omar Polo <op@omarpolo.com>
Date:
Fri Jul 9 08:11:57 2021 UTC
sync readme.md with sandbox.c
Commit:
3759d3eb56e899a8982c7e7df9555842b398b9b6
Author:
Omar Polo <op@omarpolo.com>
Date:
Tue Jul 6 11:41:24 2021 UTC
show macro usage in the example
Commit:
74f0778b9ae93a700d8b0f759b05f24e69f54921
Author:
Omar Polo <op@omarpolo.com>
Date:
Wed Jun 16 14:43:16 2021 UTC
drop the dependency on lex by implementing yylex by ourselves

The actual implementation is based off doas' parse.y. This gave us
various benefits, like cleaner code, \ to break long lines, better
handling of quotes etc...
Commit:
a6c809551e8dd554898a041a00d13b03a91d77cd
Author:
Omar Polo <op@omarpolo.com>
Date:
Fri Jun 11 16:11:58 2021 UTC
mention FastCGI in the README.md
Commit:
6957a8c27fa6df0590c6dce9f386dd669bd0b6b3
Author:
Omar Polo <op@omarpolo.com>
Date:
Fri Jun 4 07:14:50 2021 UTC
reword last sentence
Omar Polo