summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Add info about Spanish translationGrzegorz Nosek2013-05-071-0/+3
|
* Merge pull request #12 from Lekensteyn/restrict-program2Grzegorz Nosek2013-04-151-2/+27
|\ | | | | Add `-p path` option to restrict scripts
| * Add `-p path` option to restrict scriptsPeter Wu2013-04-131-2/+27
|/ | | | | | | | | | | | | If the purpose of fcgiwrap is to wrap cgit, then I want to be sure that no other program can be executed under the privileges of the fcgiwrap user. When the option `-p path` is given, only the programs specified by `path` are allowed to execute (multiple occurrences of `-p` are merged to form a list of allowed programs). Note that this value will be matched literally, no attempt is done to canonicalize the path. This also implies that glob patterns or directories will never match.
* Update READMEGrzegorz Nosek2013-02-031-2/+6
|
* Bump version numberGrzegorz Nosek2013-02-032-2/+2
|
* Add help for -f optionGrzegorz Nosek2013-02-031-0/+1
|
* Close FCGI socket before executing scriptGrzegorz Nosek2013-02-031-0/+2
| | | | | We do it in a rather violent way to avoid FCGI shutdown (the parent must keep the socket alive and working)
* Unify CGI error handlingGrzegorz Nosek2013-02-031-7/+7
| | | | | | | | | | | | Use the same error handler for 403s and 502s. This basically ports the required fixes from error_403 (previous commit) to the 502 error on failed exec(). Two user-visible side effects: - error message now says "403 Forbidden" instead of "403" - failed exec() gets logged over stderr (also, use \r\n instead of \n as a line seprator but that has been fixed up by the parent process before).
* Fix 403 error handlingGrzegorz Nosek2013-02-031-19/+21
| | | | | | | | | Report 403 errors over normal stdout/stderr (after setting up the pipes). Properly reporting the error response over stdout requires: - flushing the I/O, which would otherwise get buffered - skipping atexit handlers (would otherwise close the FCGI connection cleanly, interfering with the parent process still trying to talk over it)
* Check file permissions even when we get full path over FastCGIGrzegorz Nosek2013-02-031-0/+2
| | | | | It's not a security issue (executing the file would fail, anyway) but it's a sensible sanity check.
* Merge pull request #8 from falconindy/masterGrzegorz Nosek2012-09-082-3/+5
|\ | | | | Minor buildsys fixes
| * Correct invalid defintion in configuring systemd supportDave Reisner2012-09-081-2/+1
| | | | | | | | | | | | | | This was an unfortunate copypasta error that slipped in with 9836d6d22. The HAVE_SYSTEMD macro should only be defined based on the presence of the library, not the unit files, since the units are useless without the library support.
| * Makefile.in: define dummy datarootdir variableDave Reisner2012-09-081-0/+1
| | | | | | | | | | | | | | | | This suppresses a warning on ./configure for a directory which fcgiwrap does not use: config.status: WARNING: 'Makefile.in' seems to ignore the --datarootdir setting
| * simplify build rule for fcgiwrapDave Reisner2012-08-231-1/+3
|/ | | | | | | Add flags and libraries to the respective environment vars and let make figure out the order on its own. This provides support for unmentioned vars such as LDFLAGS implicitly, as the compilation rule isn't explicitly defined.
* Merge pull request #7 from falconindy/systemdGrzegorz Nosek2012-08-214-0/+32
|\ | | | | add systemd unit files for installation
| * add systemd unit files for installationDave Reisner2012-08-214-0/+32
|/ | | | | These are automatically installed iff systemd support is compiled into fcgiwrap.
* Merge pull request #6 from falconindy/systemdGrzegorz Nosek2012-08-213-24/+59
|\ | | | | systemd socket activation support
| * Cleanup -Wmissing-prototypes compiler warningsDave Reisner2012-08-191-5/+5
| |
| * Add support for socket activation via systemdDave Reisner2012-08-193-1/+30
| | | | | | | | | | | | This prevents the need for starting fcgiwrap explicitly, or using a tool such as spawn-fcgi. The type of socket does not matter, we merely accept a single FD passed from pid 1 and listen on it.
| * split listen() logic into separate functionDave Reisner2012-08-191-18/+24
|/
* Merge pull request #5 from goochjj/masterGrzegorz Nosek2011-12-082-2/+16
|\ | | | | STDERR redirection back through the FCGI socket
| * fix manpage - add -f optionJoe Gooch2011-12-081-0/+6
| |
| * Create -f option to allow sending stderr to fcgi logsJoseph Gooch2011-12-081-2/+10
|/
* support LDFLAGSNikoli2010-09-151-1/+1
|
* Add missing escaping to minus signs.Jordi Mallach2010-09-081-2/+2
| | | | | | "-" must be escaped ("\-") to be interpreted as minus. Signed-off-by: Jordi Mallach <jordi@debian.org>
* [GH-2] Advance configure.ac version to 1.0.3Grzegorz Nosek2010-08-231-1/+1
|
* fixing compilation under FreeBSDQuentin Stievenart2010-08-161-0/+1
|
* Create folder for man prior to the installation.Ron Huang2010-06-111-0/+2
|
* Add `-s' option to enable binding by fcgiwrap itselfGrzegorz Nosek2010-06-032-4/+144
| | | | This should ease testing and deployment in simpler cases
* Use SCRIPT_FILENAME environment variable when availableGrzegorz Nosek2010-06-032-4/+16
| | | | | | If present, it overrides DOCUMENT_ROOT and SCRIPT_NAME and prevents mangling of PATH_INFO. Should allow cleaner configs when script names don't come from request URIs directly.
* Jordi Mallach's email has been corrected as requested by him.W-Mark Kubacki2010-06-022-1/+2
| | | | He's been added to the contributors in README.rst.
* added handling of manpages to makefileW-Mark Kubacki2010-05-251-1/+2
|
* adjusted option _-c_ help textW-Mark Kubacki2010-05-251-1/+1
|
* fcgiwrap to rely on definitions provided by autoconf/autoreconfW-Mark Kubacki2010-05-255-7/+12
|
* nitpicks as described in today's email to MarkJordi Mallach2010-05-251-4/+4
| | | | Signed-off-by: W-Mark Kubacki <wmark@hurrikane.de>
* renamed: gnosek-fcgiwrap.8 -> fcgiwrap.8W-Mark Kubacki2010-05-251-0/+0
|
* added configuration examples to manpageW-Mark Kubacki2010-05-251-1/+45
|
* replaced occurences of 'gnosek-fcgiwrap' by 'fcgiwrap'W-Mark Kubacki2010-05-251-4/+4
|
* manpage as contributed by Jordi MallachJordi Mallach2010-05-251-0/+38
| | | | Signed-off-by: W-Mark Kubacki <wmark@hurrikane.de>
* help screen, along with version set to 1.0W-Mark Kubacki2010-03-221-1/+13
|
* Makefile: DESTDIR and --prefix supportW-Mark Kubacki2010-03-222-5/+10
|
* grammarW-Mark Kubacki2010-03-222-2/+2
|
* oldest possible autoconf is 2.61, with separation of troublesome functionsW-Mark Kubacki2010-03-221-2/+3
|
* abort configuration if something is missingW-Mark Kubacki2010-03-221-3/+4
|
* Makefile: proper clean and distclean targetsW-Mark Kubacki2010-03-221-1/+8
|
* typoW-Mark Kubacki2010-03-181-1/+1
|
* README: contributorsW-Mark Kubacki2010-03-181-0/+1
|
* READMEW-Mark Kubacki2010-03-181-0/+41
|
* git to ignore auto-generated filesW-Mark Kubacki2010-03-181-0/+5
|
* input files and substitution variables for autoconfW-Mark Kubacki2010-03-182-1/+38
|