Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 3 Feb 2002 18:47:51 +0100 (CET)
From:      Martin Blapp <mb@reigoldswil.ch>
To:        <ianj@calweb.com>, <jpr@vcnet.com>, <drewt@writeme.com>, <drew@mykitchentable.net>, <CV@Corbach.de>, <brady-filter@bluecrab.com>, <jmdault@mandrakesoft.com>, <chripo+frontpage@edo.uni-dortmund.de>
Cc:        <ports@freebsd.org>
Subject:   Testers needed (apache mod_frontpage improved 1.6) (DSO)
Message-ID:  <20020203182945.H776-100000@levais.imp.ch>

next in thread | raw e-mail | index | archive | help

Hi all,

As you may have noted, the "Improved mod frontpage"
project hasn't had much news in the last year.

I upgraded now this module, to have FP2002 support and to have a true DSO
install. It can now be installed together with any binary apache 1.3.x.
I also made the web administration a "opt in", tunable like FrontpageEnable
as FrontpageAdminEnable, or FrontpageAdminDisable. The admin is disabled per
default.

I also fixed some very old bugs, and tested it carefully. For the web admin
there is a new wrapper, which is called by the apache user and is _not_
SUID root. It just returns all static content like .gif, .html, .css and .js

I'd be happy if you could test the features and read the changes I made.

There are still some very ugly parts in the code, which I'd like to
replace next week. -> Remove strcat() and add a lot more checks. But
there are some main checks to be sure that nothing can be exploited.
The new wrapper does run under the apache user only so we are safe for
some way.

Thank you for testing ;-)

Distfile:
---------
http://people.freebsd.org/~mbr/distfiles/mod_frontpage-1.6.tar.gz

FreeBSD Port:
-------------

http://people.freebsd.org/~mbr/distfiles/mod_frontpage-port.tgz

The old module can be found on:

ftp://ftp.edo.uni-dortmund.de/pub/mod_frontpage

Martin

Martin Blapp, <mb@imp.ch> <mbr@FreeBSD.org>
------------------------------------------------------------------
Improware AG, UNIX solution and service provider
Zurlindenstrasse 29, 4133 Pratteln, Switzerland
Phone: +41 061 826 93 00: +41 61 826 93 01
PGP Fingerprint: B434 53FC C87C FE7B 0A18 B84C 8686 EF22 D300 551E
------------------------------------------------------------------


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ports" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020203182945.H776-100000>