Update pkg message for apache's latest security model
ClosedPublic
Actions

Authored by ler on Mar 16 2017, 7:10 PM.

Details

Reviewers

adamw
rene

Commits

rP436379: Update pkg message for apache 2.4 users for Apache 2.4's new security model.

Summary

Update pkg message for apache 2.4 users for Apache 2.4's new security model.
PR: 217850
Submitted By: dirkx@webweaving.org
Approved By: (adamw|rene) (Mentor)

Test Plan

poudriere
portlint

Diff Detail

Repository

rP FreeBSD ports repository

Lint

No Lint Coverage

Unit

No Test Coverage

Build Status

Buildable 8112
Build 8316: arc lint + arc unit

Event Timeline

ler created this revision.Mar 16 2017, 7:10 PM

Herald added a subscriber: mat. · View Herald TranscriptMar 16 2017, 7:10 PM

ler edited the summary of this revision. (Show Details)Mar 16 2017, 7:11 PM

Hold off on this, I'm not sure I want to do it. See my comments in #217850

Saying that you should add the AddHandler is a bad idea. It is not always true, many people use php through the fpm mechanism, this is why only the mod_php* ports tell you to add them.

loose the handler, and add apache 2.4 lines

Harbormaster completed remote builds in B8112: Diff 26380.Mar 18 2017, 1:47 AM

adamw added inline comments.Mar 18 2017, 1:53 AM

www/joomla3/files/pkg-message.in
14	IIRC, that's not quite right. apache24 doesn't just add that line, it needs to replace at least the `Allow from all` line (possibly the `Order` line too?).

ler added inline comments.Mar 18 2017, 2:00 AM

www/joomla3/files/pkg-message.in
14	that's how I have it for my installation at https://joomla.lerctr.org/ so, I'm not inclined to change that.

adamw added inline comments.Mar 18 2017, 2:14 AM

www/joomla3/files/pkg-message.in
14	You have Allow from all Require all granted in your apache 2.4 setup?

ler added inline comments.Mar 18 2017, 2:37 AM

www/joomla3/files/pkg-message.in

yes.

ServerName joomla.lerctr.org
DocumentRoot /usr/local/www/joomla3
ErrorLog "/var/log/httpd/joomla-ssl-error_log"
CustomLog "/var/log/httpd/joomla-ssl-access_log" common

 <Location />
  Order deny,allow
  allow from all
  require all granted
 </Location>

TIL!

Go for it, but with 3 changes:

Capitalize the R in Required to fit the other lines.
Improve your commit message. Right now it's confusing and doesn't really say what the commit is about. Really it's about showing Apache 2.4 users what to do, not about a changing security model.
You need more fields than just PR. This change was submitted by someone who deserves credit, and it needs an Approved by: field.

This revision is now accepted and ready to land.Mar 18 2017, 3:06 AM

ler edited the summary of this revision. (Show Details)Mar 18 2017, 3:09 AM

Closed by commit rP436379: Update pkg message for apache 2.4 users for Apache 2.4's new security model. (authored by ler). · Explain WhyMar 18 2017, 3:12 AM

This revision was automatically updated to reflect the committed changes.