GNU bug report logs

#33966 fcgiwrap: additional options for logging and unix domain sockets

PackageSource(s)Maintainer(s)
guix-patches PTS Buildd Popcon
Full log

Message #5 received at submit@debbugs.gnu.org (full text, mbox, reply):

Received: (at submit) by debbugs.gnu.org; 3 Jan 2019 20:02:51 +0000
From debbugs-submit-bounces@debbugs.gnu.org Thu Jan 03 15:02:51 2019
Received: from localhost ([127.0.0.1]:45987 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces@debbugs.gnu.org>)
	id 1gf9Cd-0007Ci-9c
	for submit@debbugs.gnu.org; Thu, 03 Jan 2019 15:02:51 -0500
Received: from eggs.gnu.org ([208.118.235.92]:38640)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <florian.dold@gmail.com>) id 1gf9Cb-0007CZ-4k
 for submit@debbugs.gnu.org; Thu, 03 Jan 2019 15:02:49 -0500
Received: from lists.gnu.org ([208.118.235.17]:51372)
 by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32)
 (Exim 4.71) (envelope-from <florian.dold@gmail.com>)
 id 1gf9Ca-0005wr-V9
 for submit@debbugs.gnu.org; Thu, 03 Jan 2019 15:02:49 -0500
Received: from eggs.gnu.org ([208.118.235.92]:59143)
 by lists.gnu.org with esmtp (Exim 4.71)
 (envelope-from <florian.dold@gmail.com>) id 1gf9CZ-0001uD-E3
 for guix-patches@gnu.org; Thu, 03 Jan 2019 15:02:48 -0500
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org
X-Spam-Level: 
X-Spam-Status: No, score=0.8 required=5.0 tests=BAYES_50,FREEMAIL_FROM
 autolearn=disabled version=3.3.2
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <florian.dold@gmail.com>) id 1gf9CV-0005tg-9v
 for guix-patches@gnu.org; Thu, 03 Jan 2019 15:02:47 -0500
Received: from mail-wm1-x32f.google.com ([2a00:1450:4864:20::32f]:37457)
 by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16)
 (Exim 4.71) (envelope-from <florian.dold@gmail.com>)
 id 1gf9CU-0005sm-V0
 for guix-patches@gnu.org; Thu, 03 Jan 2019 15:02:43 -0500
Received: by mail-wm1-x32f.google.com with SMTP id g67so31332383wmd.2
 for <guix-patches@gnu.org>; Thu, 03 Jan 2019 12:02:42 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;
 h=to:from:openpgp:autocrypt:subject:message-id:date:user-agent
 :mime-version:content-language;
 bh=dA2Nabope81by/pztAh9HwURADXuXjjsX/kJFzZ7lLY=;
 b=juR8jT/KKPK2hL//oCjMSKm+pCflOcAQYsXRFjVJl9PHq1VbO0296CfCn6ZS7gmAjN
 laktG9iNK8hJhoIWafy2Fjl4zEW0YZt2R833+TSFuVIczXF9vo8yWBLSs2uqqAmsQNeJ
 3t0Y5tJnZsXjBiIjSITbtmS2eBhoJpsdBroBp1maSIVTuSLZhVHqHIxMVC8kWzZ4RxuE
 VFHSTbS40xPX4VOBBmsOoezBgj9ZbH1Cj982vz4KaQinA17tHOcsrLql0PBtzC6uGZ59
 W7I9XHxcLFsX8LYWYe6usDNYTRkgW+QVAzE6iOtTrunA2EAXpNrzKQkvleD7QeMbUKMc
 tcHw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20161025;
 h=x-gm-message-state:to:from:openpgp:autocrypt:subject:message-id
 :date:user-agent:mime-version:content-language;
 bh=dA2Nabope81by/pztAh9HwURADXuXjjsX/kJFzZ7lLY=;
 b=Ktb7kJbQ12FJ0nJp6CAjo+HUaHOPOXcB4ktvTbv1w68ngO7KVduoiP5QOGrbOX4v7C
 hgui7tr9uXy0ZqNzUGpK9oAR5x0y8ZstqIZeczpUsNzontZEWH8Y6M7Rv9XUhgHavjOT
 JOOohjVqfaGHUju7zxUTlGwQXJztnet77evrfjGvevYAj72Rt0rRndq3jTTYdxdKojci
 UrsUzffmWiUcdYefHIwRh7zoZGfx/rl1wEvHmDmO7HFvMTEIOt1JXvZWCe3mrGDQNgOh
 HKc4dO8cXBWVyi/SU67U6EBCRobZiBVmmJFPVbfJ6OeeurmpjrZsm4gsHe3cFn1hlb+d
 OxkQ==
X-Gm-Message-State: AA+aEWbFz86lYbHs3BOPmon7R49aVetD01XYvaSP6nEOBLrtbRfjRLDg
 i61UC0QdDjgr9eySsHICnioanTMJ
X-Google-Smtp-Source: AFSGD/WsZnCbJXyZzEmS0Ia3r5c8oAq+94rcx8aGT1J3Qe5lMCPoCuwWnyYVcUsohiGGL0bua22bBw==
X-Received: by 2002:a1c:83c8:: with SMTP id
 f191mr39193639wmd.134.1546545761369; 
 Thu, 03 Jan 2019 12:02:41 -0800 (PST)
Received: from [192.168.178.64] (p508876EC.dip0.t-ipconnect.de.
 [80.136.118.236])
 by smtp.gmail.com with ESMTPSA id l6sm42366499wrv.70.2019.01.03.12.02.40
 for <guix-patches@gnu.org>
 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
 Thu, 03 Jan 2019 12:02:40 -0800 (PST)
To: guix-patches@gnu.org
From: Florian Dold <florian.dold@gmail.com>
Openpgp: preference=signencrypt
Autocrypt: addr=florian.dold@gmail.com; keydata=
 mQENBFr0DFABCADIf6L8MOVfrvjN8vTPngMjxGk4gpaRAYydTYMt8I7A746E8fI4vIp66b7x
 ZmT+RwnR+nydTLdAMEpwsqxOUtBLBG+63v/pOFEqHaWWjoWB9tC2GKa23o5accKdeVwZAUSC
 d8PMCTY0An25yjspAPFeSuS8OVhNcJgqwMRLrGAeb6nOiHzNgbcH3x+z8pvZ6uEmfxOmnPxz
 eJ2YkRB8EZtdz2kVSAs8hnDXXhA2kPYu299N42iOnsAI/ZQLw4L4CciFD9g7yHyjSGf2ugLd
 v2MY/e7bg2MbrpOjl9F6tkWcMG47Q15Zg5h5i1TUWb5u6BYwTWegxjoF8aghsD4YmlDdABEB
 AAG0JUZsb3JpYW4gRG9sZCA8Zmxvcmlhbi5kb2xkQGdtYWlsLmNvbT6JAVQEEwEIAD4WIQTS
 icR018Yz2C9+q1hf73L/w6CZwgUCWvQMUQIbAwUJAeEzgAULCQgHAgYVCgkICwIEFgIDAQIe
 AQIXgAAKCRBf73L/w6CZwsutCACiK6SMco78RVXS0zx7nQZl5BwHr8hVj4NjMT2PgMy/HvBN
 kgE6QZ+nCyu4Oc25xg7Rzj0Msp66eFGJzDI9EHM0yNOvWuIrySihESd9cp8kn5oe27Wds356
 MW/TVYn/S2qKAiEFzAa+pq4H7kYqOfcG3uqNH5wf1DfCKQFW3+1CBR5H2lATLqJLHDybr4S9
 h+9+8LUw3KBw99mwi4UjYYyCApmXH1IuOMOMDG0r8zGxyT6SNb/A1BcCD6bjcfy8IXrNgq00
 trnLEYqil17lWwV3TcHQVsMWDU2NzwX4+4rBELlLR/TOYK+XRZhgFiBH9OlvKQ+iMSdDf1SS
 G8YxoBP+uQENBFr0DFABCADBYR9GXjzz2FoWRTPUM9IpHBwJuBfxo/ITjwjY1+4LMnoZQjV1
 TugJJoDFRQdTXod+w1iGtLCpZnWc8cgatmEPv7U6X9++X/RjrOtP/RBFRIx2gFg+QNXluxut
 U6aX4ag2EQSrst4CGtAJIXZvpNqv6GP11NO9aqTkrHnjAMLyO1MbtSXv3wohGtBPjGOCXmhG
 kOu0o27edqMPyoTjntksg6gTQoh1I1jQLVH5W1HWr0TxQnzSTloqHGf+rRYBlu5F4COeb2JD
 c1bqxaJMpXzA0IMGEFOeUPN6k6fvaadAcdGN6apLmU4jhhizAC0FvQNEWChd5WTVWR7DP5Uc
 gOSHABEBAAGJATwEGAEIACYWIQTSicR018Yz2C9+q1hf73L/w6CZwgUCWvQMUAIbDAUJAeEz
 gAAKCRBf73L/w6CZwjXsB/0QCZvO+chvdd719yAFLEAkhGxPeolvJaGudg1AY37dx0NaeBhG
 DzE6kWXCSD0Sp/1+36hTv680+I+L9gQW9p3mZRyT/syI63aEMIPAWCCVy7OokujVs0F8oozI
 CJexqdMP7jho5zDU9ecIMNo7zOo7+U4mfNPnS70wJmdBO2s9edVmXkfkEzuL6fGuDFdjC3le
 AfLLDlYsZ/7jUWX9UF+U05mjSI+1w3vmUigufKdf3h65s4xcgRr+BR0uuAG81oJ+/eiEyv+i
 yo2U+n+RaH9yqO4rrMgQFnMrfr0JQ6CDSklup4LRPjpjvdqX900QkVWErvMxDnC66pyur0o/ 3rSx
Subject: fcgiwrap: additional options for logging and unix domain sockets
Message-ID: <624ba072-d5fe-b159-46af-61e79caf22f1@gmail.com>
Date: Thu, 3 Jan 2019 21:02:38 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101
 Thunderbird/60.3.3
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="------------0EC48590587DD7B3CAB39C78"
Content-Language: en-US-large
X-detected-operating-system: by eggs.gnu.org: Genre and OS details not
 recognized.
X-Received-From: 2a00:1450:4864:20::32f
X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x
X-Spam-Score: -4.0 (----)
X-Debbugs-Envelope-To: submit
X-BeenThere: debbugs-submit@debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit@debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request@debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces@debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces@debbugs.gnu.org>
X-Spam-Score: -5.0 (-----)

[Message part 1 (text/plain, inline)]
Hi Guix,

this patch adds additional options to the fcgiwrap service.  In
particular it allows

1. writing the output of the fcgi process to a file (with the 'log-file'
option)

2. arranging for a directory to be created so that the fcgiwrap process
can create its listening socket without running into permission problems
(with the 'ensure-socket-dir?' option)

3. adjusting the permissions on the listening unix domain socket,
typically so that users in the fcgiwrap group have read and write access
to that socket (with the 'adjusted-socket-permissions' option)

Additionally, a potentially left-over fcgiwrap socket is cleaned up
before starting the service, which would otherwise lead to the process
refusing to run.

The documentation is also changed to address a potential security issue,
now recommending against running fcgiwrap as root.

The configuration defaults are not ideal (a tcp socket with unrestricted
access from any local user), but impossible to change without breaking
existing system definitions.

- Florian

[0001-services-fcgiwrap-Implement-additional-options.patch (text/x-patch, attachment)]

Send a report that this bug log contains spam.

debbugs.gnu.org maintainers <help-debbugs@gnu.org>. Last modified: Fri Jan 3 03:09:25 2025; Machine Name: wallace-server

GNU bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.