network/mod_chroot: Added to 12.1 repository

This commit is contained in:
Menno E. Duursma 2010-05-11 22:54:54 +02:00 committed by David Somero
parent ee86ce5db7
commit ea78ddeb37
4 changed files with 117 additions and 0 deletions

21
network/mod_chroot/README Normal file
View File

@ -0,0 +1,21 @@
mod_chroot allows you to run Apache in a chroot jail with no additional files.
This makes running Apache in a chroot environment easy.
The chroot() system call is performed at the end of startup procedure - when
all libraries are loaded and log files open. No need for a special directory
hierarchy (containing /dev, /lib, /etc...), unless an external handler, such
as suEXEC or suPHP, is being used, or system()-like functions are in use.
This package pre-creates /var/chroot/httpd with just enough subdirs to enable
the stock Slackware config to run. Provided /etc/httpd/httpd.conf contains:
ChrootDir /var/chroot/httpd
LoadModule chroot_module lib/httpd/modules/mod_chroot.so
And the following (or similar) commands where run:
mount -o nosuid,nodev --bind /var/run/httpd /var/chroot/httpd/var/run/httpd
mount -o nosuid,nodev --bind /srv /var/chroot/httpd/srv
mount --bind /var/www /var/chroot/httpd/var/www
Above commands maybe added to rc.local.

View File

@ -0,0 +1,69 @@
#!/bin/sh
# Slackware build script for mod_chroot
# Written by Menno E. Duursma <druiloor@zonnet.nl>
# This program is free software. It comes without any warranty.
# Granted WTFPL, Version 2, as published by Sam Hocevar. See
# http://sam.zoy.org/wtfpl/COPYING for more details.
PRGNAM=mod_chroot
VERSION=${VERSION:-0.5}
ARCH=${ARCH:-i486}
BUILD=${BUILD:-1}
TAG=${TAG:-_SBo}
CWD=$(pwd)
TMP=${TMP:-/tmp/SBo}
PKG=$TMP/package-$PRGNAM
OUTPUT=${OUTPUT:-/tmp} # Drop the package in /tmp
if [ "$ARCH" = "i486" ]; then
SLKCFLAGS="-O2 -march=i486 -mtune=i686"
elif [ "$ARCH" = "i686" ]; then
SLKCFLAGS="-O2 -march=i686 -mtune=i686"
elif [ "$ARCH" = "x86_64" ]; then
SLKCFLAGS="-O2 -fPIC"
fi
set -e # Exit on most errors
rm -rf $PKG
mkdir -p $TMP $PKG $OUTPUT
cd $TMP
rm -rf $PRGNAM-$VERSION
tar xvf $CWD/$PRGNAM-$VERSION.tar.gz
cd $PRGNAM-$VERSION
chown -R root:root .
find . \
\( -perm 777 -o -perm 775 -o -perm 711 -o -perm 555 -o -perm 511 \) \
-exec chmod 755 {} \; -o \
\( -perm 666 -o -perm 664 -o -perm 600 -o -perm 444 -o -perm 440 -o -perm 400 \) \
-exec chmod 644 {} \;
# Create destdir
mkdir -p $PKG/usr/lib/httpd/modules
# Build
CFLAGS="$SLKCFLAGS" \
CXXFLAGS="$SLKCFLAGS" \
apxs -ca mod_chroot.c
# Copy into place, and strip
install --mode=755 --strip .libs/mod_chroot.so $PKG/usr/lib/httpd/modules
# Create initial environment
mkdir -p $PKG/var/chroot/httpd/{srv,var/run/httpd,var/www}
# Documentiation
mkdir -p $PKG/usr/doc/$PRGNAM-$VERSION
cp -a [A-Z][A-Z]* $PKG/usr/doc/$PRGNAM-$VERSION
cat $CWD/$PRGNAM.SlackBuild > $PKG/usr/doc/$PRGNAM-$VERSION/$PRGNAM.SlackBuild
cat $CWD/README > $PKG/usr/doc/$PRGNAM-$VERSION/README$TAG
mkdir -p $PKG/install
cat $CWD/slack-desc > $PKG/install/slack-desc
# Make the package; be sure to leave it in $OUTPUT
cd $PKG
/sbin/makepkg -l y -c n $OUTPUT/$PRGNAM-$VERSION-$ARCH-$BUILD$TAG.tgz

View File

@ -0,0 +1,8 @@
PRGNAM="mod_chroot"
VERSION="0.5"
HOMEPAGE="http://core.segfault.pl/~hobbit/mod_chroot/"
DOWNLOAD="http://core.segfault.pl/~hobbit/mod_chroot/dist/mod_chroot-0.5.tar.gz"
MD5SUM="d72716052faa3bdd3371210f26b13f38"
MAINTAINER="Menno E. Duursma"
EMAIL="druiloor@zonnet.nl"
APPROVED="David Somero"

View File

@ -0,0 +1,19 @@
# HOW TO EDIT THIS FILE:
# The "handy ruler" below makes it easier to edit a package description. Line
# up the first '|' above the ':' following the base package name, and the '|'
# on the right side marks the last column you can put a character in. You must
# make exactly 11 lines for the formatting to be correct. It's also
# customary to leave one space after the ':'.
|-----handy-ruler-----------------------------------------------------|
mod_chroot: mod_chroot (an Apache module)
mod_chroot:
mod_chroot: This module runs the Apache webserver in a chroot environment.
mod_chroot: Making it easy to control what httpd 'sees' of the filesystem.
mod_chroot:
mod_chroot: mod_chroot was written and is maintaind by Hobbit of segfault.pl
mod_chroot:
mod_chroot:
mod_chroot:
mod_chroot:
mod_chroot: