httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Jeff Trawick <traw...@gmail.com>
Subject Re: mpm-itk and upstream Apache, once again
Date Thu, 19 Jul 2012 16:43:40 GMT
On Thu, Jul 19, 2012 at 11:38 AM, Steinar H. Gunderson
<sgunderson@bigfoot.com> wrote:
> On Thu, Jul 19, 2012 at 11:27:04AM -0400, Jeff Trawick wrote:
>> What changes are needed to httpd trunk so that you can build mpm-itk
>> with apxs and enable it via LoadModule, such that mpm-itk is fully
>> functional?  As I'm sure you're aware, prefork, worker, and event are
>> all untied from core enough to support that in httpd >= 2.4.
>
> We'd need:
>
>   1. A hook right after merging the perdir config.
>   2. Fixes to get Apache to drop the connection if it detects
>      (during .htaccess lookup) that it would need to change the uid.
>
> Both patches are simple, although for #2 to be truly generic (ie. be usable
> by mod_privileges as well) we'd need some sort of signalling mechanism saying
> “we have switched uids and cannot switch back”, which then both
> mod_privileges (in secure mode) and mpm-itk could set.
>
> I've attached the current versions of both patches from my current Apache 2.4
> patch set; you can see the “ap_running_under_mpm_itk” variable which would
> probably need to be replaced by ap_mpm_query() or similar.

I suspect that an ap_hook_stat() to be called from directory walk
would allow itk to keep its odd processing private, and might be
useful to other modules as well.

For ap_parse_htaccess(), I suspect that some mechanism for plugging
into the whole htaccess-is-a-file mess could enable interesting
features beyond mpm-itk, but perhaps the minimum is the appropriate
solution: Use a hook in place of a direct call to ap_pcfg_openfile().

The post-perdir-config hook looks reasonable to me.

--

While the usefulness of a new hook or that by other existing modules
(mod_privileges perhaps) to solve a current problem is interesting, it
should be sufficient to determine that a new hook can be put to good
use by some theoretical module.

>
> /* Steinar */
> --
> Homepage: http://www.sesse.net/
>



-- 
Born in Roswell... married an alien...
http://emptyhammock.com/

Mime
View raw message