debian/0000755000000000000000000000000012167736007007177 5ustar debian/libapache2-mod-suphp.docs0000644000000000000000000000004511743560507013753 0ustar doc/apache/INSTALL doc/apache/CONFIG debian/rules0000755000000000000000000000316712167355326010267 0ustar #!/usr/bin/make -f # -*- makefile -*- # Sample debian/rules that uses debhelper. # This file was originally written by Joey Hess and Craig Small. # As a special exception, when this file is copied by dh-make into a # dh-make output file, you may use that output file without restriction. # This special exception was added by Craig Small in version 0.37 of dh-make. # Uncomment this to turn on verbose mode. #export DH_VERBOSE=1 %: dh $@ --with quilt,autotools-dev,autoreconf,apache2 override_dh_auto_configure: CFLAGS="$(CFLAGS) `pkg-config --cflags apr-1`" ./configure --prefix=/usr \ --sysconfdir=/etc/suphp \ --with-apxs=/usr/bin/apxs2 \ --with-apache-user=www-data \ --sbindir=/usr/lib/suphp \ --with-setid-mode=owner \ --with-logfile=/var/log/suphp/suphp.log override_dh_auto_install: override_dh_install: dh_install docbook-to-man debian/suphp-common.manpage.sgml > debian/suphp-common/usr/share/man/man8/suphp.8 install -m 644 debian/suphp-common.lintian-override debian/suphp-common/usr/share/lintian/overrides/suphp-common mv debian/suphp-common/etc/suphp/suphp.conf-example debian/suphp-common/etc/suphp/suphp.conf rm -f src/apache2/.libs/mod_suphp.so mv src/apache2/.libs/mod_suphp.so.0.0.0 src/apache2/.libs/mod_suphp.so override_dh_installdocs: dh_installdocs mv debian/libapache2-mod-suphp/usr/share/doc/libapache2-mod-suphp/INSTALL debian/libapache2-mod-suphp/usr/share/doc/libapache2-mod-suphp/README override_dh_installchangelogs: dh_installchangelogs ChangeLog override_dh_fixperms: dh_fixperms chmod u+s debian/suphp-common/usr/lib/suphp/suphp override_dh_makeshlibs: # Not needed here, not a dynamic lib debian/libapache2-mod-suphp.dirs0000644000000000000000000000006511103010230013733 0ustar usr/lib/apache2/modules/ etc/apache2/mods-available/ debian/suphp-common.lintian-override0000644000000000000000000000007711103010231014772 0ustar suphp-common: setuid-binary usr/lib/suphp/suphp 4755 root/root debian/conf/0000755000000000000000000000000011771426157010126 5ustar debian/conf/500mod_suphp.info0000644000000000000000000000032611103010230013171 0ustar Loadmodule: suphp_module /usr/lib/apache/1.3/mod_suphp.so Directives: suPHP_Engine suPHP_ConfigPath suPHP_AddHandler suPHP_RemoveHandler Description: Apache module to run php scripts with the owner permissions debian/conf/suphp.load0000644000000000000000000000007611103010230012073 0ustar LoadModule suphp_module /usr/lib/apache2/modules/mod_suphp.so debian/conf/suphp.conf0000644000000000000000000000124611771426157012137 0ustar SetHandler application/x-httpd-suphp suPHP_AddHandler application/x-httpd-suphp suPHP_Engine on # By default, disable suPHP for debian packaged web applications as files # are owned by root and cannot be executed by suPHP because of min_uid. suPHP_Engine off # # Use a specific php config file (a dir which contains a php.ini file) # suPHP_ConfigPath /etc/php5/cgi/suphp/ # # Tells mod_suphp NOT to handle requests with the type . # suPHP_RemoveHandler debian/suphp-common.copyright0000644000000000000000000000207711103010231013531 0ustar This package was debianized by Emmanuel Lacour on Fri, 19 Sep 2003 15:25:44 +0200. It was downloaded from http://www.suphp.org/download/ Upstream Author: Sebastian Marsching Copyright (c) 2004 Sebastian Marsching License: This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA. see /usr/share/common-licenses/GPL for all details. debian/libapache2-mod-suphp.apache20000644000000000000000000000013112167355326014324 0ustar mod src/apache2/.libs/mod_suphp.so mod debian/conf/suphp.conf mod debian/conf/suphp.load debian/suphp-common.postrm0000644000000000000000000000167411103010231013047 0ustar #! /bin/sh # postrm script for suphp-common # # see: dh_installdeb(1) set -e # summary of how this script can be called: # * `remove' # * `purge' # * `upgrade' # * `failed-upgrade' # * `abort-install' # * `abort-install' # * `abort-upgrade' # * `disappear' overwrit>r> # for details, see http://www.debian.org/doc/debian-policy/ or # the debian-policy package case "$1" in purge) rm -f /var/log/suphp/suphp.log* ;; remove|upgrade|failed-upgrade|abort-install|abort-upgrade|disappear) ;; *) echo "postrm called with unknown argument \`$1'" >&2 exit 1 esac # dh_installdeb will replace this with shell code automatically # generated by other debhelper scripts. #DEBHELPER# exit 0 debian/suphp-common.install0000644000000000000000000000007311772332356013214 0ustar src/suphp usr/lib/suphp/ doc/suphp.conf-example etc/suphp/ debian/NEWS0000644000000000000000000000226011302023454007657 0ustar suphp (0.7.1-1) unstable; urgency=low To allow mod_suphp to work at the same time as mod_php, handler name was renamed from application/x-httpd-php to application/x-httpd-suphp in both suphp and apache configuration files. You must check that any other suphp statements in your apache configuration files uses the same syntax. -- Emmanuel Lacour Mon, 03 Aug 2009 15:31:37 +0200 suphp (0.6.2-2) unstable; urgency=low To match the same behaviour as mod_php, AddHandler was replaced by AddType and x-httpd-php by application/x-httpd-php in both suphp configuration files. You must check that any other suphp statements in your apache configuration files uses the same syntax. -- Emmanuel Lacour Sun, 14 Oct 2007 19:42:30 +0200 suphp (0.6.0-1) unstable; urgency=low This new release introduce a runtime configuration file (/etc/suphp/suphp.conf) and a new configuration option for apache/apache2. You must now add the following line in your apache/apache2 configuration to make suphp active for php scripts: suPHP_AddHandler x-httpd-php -- Emmanuel Lacour Sun, 2 Oct 2005 11:09:21 +0200 debian/source/0000755000000000000000000000000011743512333010470 5ustar debian/source/format0000644000000000000000000000001411743512333011676 0ustar 3.0 (quilt) debian/patches/0000755000000000000000000000000011772335765010635 5ustar debian/patches/01_debian.diff0000644000000000000000000000171211743534005013174 0ustar From: Subject: Adapt to debian paths Index: suphp/doc/suphp.conf-example =================================================================== --- suphp.orig/doc/suphp.conf-example 2012-04-18 14:42:43.000000000 +0200 +++ suphp/doc/suphp.conf-example 2012-04-18 14:48:01.853452999 +0200 @@ -1,12 +1,12 @@ [global] ;Path to logfile -logfile=/var/log/suphp.log +logfile=/var/log/suphp/suphp.log ;Loglevel loglevel=info ;User Apache is running as -webserver_user=wwwrun +webserver_user=www-data ;Path all scripts have to be in docroot=/var/www:${HOME}/public_html @@ -27,7 +27,7 @@ errors_to_browser=false ;PATH environment variable -env_path=/bin:/usr/bin +env_path="/bin:/usr/bin" ;Umask to set, specify in octal notation umask=0077 @@ -41,7 +41,7 @@ [handlers] ;Handler for php-scripts -x-httpd-php="php:/usr/bin/php" +application/x-httpd-suphp="php:/usr/bin/php-cgi" ;Handler for CGI-scripts x-suphp-cgi="execute:!self" debian/patches/series0000644000000000000000000000005011771425655012042 0ustar 01_debian.diff 02_remove_apache1.x.diff debian/patches/02_remove_apache1.x.diff0000644000000000000000000000222311771425677015115 0ustar From: Joe Gillotti Subject: Disable apache1.x compilation diff -u --recursive suphp-0.7.1/configure.ac suphp-0.7.1-fixed/configure.ac --- suphp-0.7.1/configure.ac 2009-03-14 13:58:11.000000000 -0400 +++ suphp-0.7.1-fixed/configure.ac 2012-03-27 00:22:45.282086238 -0400 @@ -241,7 +241,7 @@ # Conditionally include UserGroup support AM_CONDITIONAL([COND_APUSERGROUP], [test \( x"$SETID_MODE" = xparanoid \) -o \( x"$SETID_MODE" = xforce \) ]) -AC_CONFIG_FILES([Makefile src/Makefile src/apache/Makefile src/apache2/Makefile]) +AC_CONFIG_FILES([Makefile src/Makefile src/apache2/Makefile]) AC_OUTPUT if test "$APXS" = "/notfound/"; then diff -u --recursive suphp-0.7.1/src/Makefile.am suphp-0.7.1-fixed/src/Makefile.am --- suphp-0.7.1/src/Makefile.am 2008-03-29 09:02:36.000000000 -0400 +++ suphp-0.7.1-fixed/src/Makefile.am 2012-03-27 00:23:10.262087138 -0400 @@ -1,13 +1,10 @@ AM_CXXFLAGS=-DOPT_CONFIGFILE=\"${sysconfdir}/suphp.conf\" -if COND_AP13 - MAYBE_AP = apache -endif if COND_AP20 MAYBE_AP = apache2 endif -SUBDIRS = $(MAYBE_AP) -DIST_SUBDIRS = apache apache2 +SUBDIRS = apache2 +DIST_SUBDIRS = apache2 sbin_PROGRAMS = suphp debian/compat0000644000000000000000000000000211743512225010366 0ustar 9 debian/control0000644000000000000000000000202712167355345010605 0ustar Source: suphp Section: httpd Priority: optional Maintainer: Emmanuel Lacour Build-Depends: debhelper (>= 9), apache2-dev (>= 2.4), libapr1-dev, docbook-to-man, pkg-config, dh-autoreconf, autotools-dev, quilt, dh-apache2 Standards-Version: 3.9.3 Package: suphp-common Architecture: any Depends: ${shlibs:Depends}, ${misc:Depends}, php5-cgi Description: Common files for mod suphp Suphp consists of an Apache module (mod_suphp for either Apache 1.3.x or Apache 2.x) and a setuid root binary (suphp) that is called by the Apache module to change the uid of the process executing the PHP interpreter to the owner of the php script. Package: libapache2-mod-suphp Architecture: any Depends: ${shlibs:Depends}, ${misc:Depends}, suphp-common (= ${binary:Version}) Description: Apache2 module to run PHP scripts with the owner permissions With the use of the suphp setuid root binary (from suphp-common package), this Apache2 module change the uid of the process executing the PHP interpreter to the owner of the php script. debian/suphp-common.logrotate0000644000000000000000000000015711302023454013532 0ustar /var/log/suphp/*.log { daily rotate 7 missingok compress delaycompress notifempty create 640 root adm } debian/libapache2-mod-suphp.copyright0000644000000000000000000000577611103010230015020 0ustar This package was debianized by Emmanuel Lacour on Fri, 19 Sep 2003 15:25:44 +0200. It was downloaded from http://www.suphp.org/download/ Upstream Author: Sebastian Marsching Copyright: /* ==================================================================== * The Apache Software License, Version 1.1 * * Copyright (c) 2000 The Apache Software Foundation. All rights * reserved. * * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions * are met: * * 1. Redistributions of source code must retain the above copyright * notice, this list of conditions and the following disclaimer. * * 2. Redistributions in binary form must reproduce the above copyright * notice, this list of conditions and the following disclaimer in * the documentation and/or other materials provided with the * distribution. * * 3. The end-user documentation included with the redistribution, * if any, must include the following acknowledgment: * "This product includes software developed by the * Apache Software Foundation (http://www.apache.org/)." * Alternately, this acknowledgment may appear in the software itself, * if and wherever such third-party acknowledgments normally appear. * * 4. The names "Apache" and "Apache Software Foundation" must * not be used to endorse or promote products derived from this * software without prior written permission. For written * permission, please contact apache@apache.org. * * 5. Products derived from this software may not be called "Apache", * nor may "Apache" appear in their name, without prior written * permission of the Apache Software Foundation. * * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE * DISCLAIMED. IN NO EVENT SHALL THE APACHE SOFTWARE FOUNDATION OR * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF * USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND * ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT * OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF * SUCH DAMAGE. * ==================================================================== * * This software consists of voluntary contributions made by many * individuals on behalf of the Apache Software Foundation. For more * information on the Apache Software Foundation, please see * . * * Portions of this software are based upon public domain software * originally written at the National Center for Supercomputing Applications, * University of Illinois, Urbana-Champaign. */ debian/suphp-common.dirs0000644000000000000000000000012511103010231012452 0ustar etc/suphp usr/lib/suphp var/log/suphp usr/share/man/man8 usr/share/lintian/overrides debian/changelog0000644000000000000000000001522012167735452011054 0ustar suphp (0.7.1-3.1) unstable; urgency=low * Non-maintainer upload. * Revert to 0.7.1-2 for Apache 2.4 transition (closes: #709462). * Remove hardcoded Build-Depends/Depends: apache2-api-20120211. -- Colin Watson Fri, 12 Jul 2013 09:15:32 +0100 suphp (0.7.1-3) unstable; urgency=low * Remove support for apache 2.4 debian package (stalled in experimental) -- Emmanuel Lacour Tue, 26 Jun 2012 15:30:52 +0200 suphp (0.7.1-2) experimental; urgency=low * Lintian cleanup: - remove obsolete dependency on php4 - use quilt instead of dpatch for patches management - add missing ${misc:Depends} - convert debian makefile to make use of "dh" - update Standards-Version to 3.9.3 * Add default "rotate" option to logrotate file (closes: #542021) * Fix typo in package descriptions (closes: #630515) * Add quotes around env_path configuration variable (closes: #647604) * Replace AddType by SetHandler in module configuration (closes: #571653, #594571) * Update dependencies and make use of dh_apache2 for Apache 2.4 (closes: #666823) * Convert packaging to 3.0 (quilt) * Don't override CPPFLAGS with pkg-config output (closes: #655419) -- Emmanuel Lacour Wed, 18 Apr 2012 14:32:35 +0200 suphp (0.7.1-1) unstable; urgency=low * New upstream release (closes: #528379, #520182) * debian/NEWS: add information about AddHandler -> AddType change introduced in 0.6.2-2 (closes: #517805) * debian/conf/suphp.conf, debian/patches/01_debian.dpatch: switch from application/x-httpd-php to application/x-httpd-suphp to allow simultaneous use of mod_suphp and mod_php (closes: #519005, #514725) -- Emmanuel Lacour Mon, 03 Aug 2009 15:15:38 +0200 suphp (0.6.2-3) unstable; urgency=low * debian/conf/suphp.conf: by default, deactivate suPHP for applications in /usr/share (owned by uid 0) (closes: #472352, closes: #420007) * debian/control: bump standard-version -- Emmanuel Lacour Wed, 04 Jun 2008 10:04:08 +0200 suphp (0.6.2-2.1) unstable; urgency=high * Non-maintainer upload by the security team * Fix race condition in symlink handling by adding 04_CVE-2008-1614.dpatch (Closes: #475431) Fixes: CVE-2008-1614 -- Steffen Joeris Sat, 10 May 2008 08:48:45 +0000 suphp (0.6.2-2) unstable; urgency=low * remove apache 1.x package (closes: #429079) * debian/rules, debian/compat, debian/control: lintian cleanup * debian/conf/suphp.conf, debian/patches/01_debian.dpatch: replaced AddHandler by AddType and x-httpd-php by application/x-httpd-php to get the same behavior as mod php with filenames extensions (closes: #416424) -- Emmanuel Lacour Sun, 14 Oct 2007 19:42:30 +0200 suphp (0.6.2-1) unstable; urgency=low * New uptream release (closes: #405059) (no sources changes from previous snapshot) -- Emmanuel Lacour Tue, 9 Jan 2007 18:29:26 +0100 suphp (0.6.1.20061108-1) unstable; urgency=low * New upstream snapshot (closes: #395929) * debian/patches/04_apache2.2.dpatch: removed (included upstream) -- Emmanuel Lacour Wed, 8 Nov 2006 10:06:32 +0100 suphp (0.6.1.20060928-1) unstable; urgency=low * New upstream snapshot (closes: #382086) * debian/control: updated Build-Depends (closes: #391019) * debian/control: updated suphp-common dependencies (closes: #375900) * debian/control: changes apache2-common depends in favor of apache2.2-common (closes: #391765) * debian/rules, debian/patches: Switching to dpatch * Removed debconf abuse (closes: #388967, closes: #383838) * debian/patches/04_apache2.2.dpatch: added support for apache 2.2.x * debian/libapache-mod-suphp.install: added suphp.conf in /etc/apache/conf.d/ (same behavior as apache2) -- Emmanuel Lacour Sun, 8 Oct 2006 20:53:17 +0200 suphp (0.6.1-1) unstable; urgency=low * New upstream release * libtool update (closes: #342676) -- Emmanuel Lacour Thu, 29 Dec 2005 17:53:48 +0100 suphp (0.6.0-2) unstable; urgency=low * Added debian/po/fr.po (closes: #325213) * Added debian/po/cs.po (closes: #325870, closes: #331221) * Added debian/po/sv.po (closes: #330944, closes: #331264) * debian/suphp-common.config: lower down priority from "critical" to "medium" * debian/suphp-common.templates: better description for upgrade0.6.0 (closes: #324635) * Added debian/NEWS with informations on 0.6.0 configuration changes * debian/control: use ${misc:Depends} instead of debconf (closes: #332107) -- Emmanuel Lacour Sun, 2 Oct 2005 11:09:21 +0200 suphp (0.6.0-1) unstable; urgency=low * New upstream release (closes: #314471) * This new release introduce a runtime configuration file (closes: #297821, closes: #287888). * debian/rules: configure with php as /usr/bin/php-cgi (can also be set in the new runtime configuration file) (closes: #297790) * added a debconf note when upgrading from version << 0.6.0 which now require suPHP_AddHandler directive in apache configuration * src/apache2/mod_suphp.c, src/apache/mod_suphp.c: made suPHP_AddHandler able to be set as a global apache option * debian/control: depends on "php4 or php5" as php5 is now in unstable * debian/control: switch section from "admin" to "web" -- Emmanuel Lacour Sat, 13 Aug 2005 13:42:30 +0200 suphp (0.5.2-3) unstable; urgency=low * rules: rename INSTALL files to README * control: suppress leading spaces at beginning of description * add lintian-override for suid binary * remove debconf for issuing broken apache2 config warning * rules: remove Makefile and config.(status|log|h) in clean target * suphp-common.copyright: make difference between "license" and "copyright" * suphp-common.postrm: cleanup logs on purge -- Emmanuel Lacour Tue, 12 Oct 2004 10:40:47 +0200 suphp (0.5.2-2) unstable; urgency=low * Move /usr/sbin/suphp to /usr/lib/suphp/suphp as this binary isn't for command line use * Added man page for suphp command * Add postinst/prerm script do libapache*-mod-suphp -- Emmanuel Lacour Mon, 20 Sep 2004 21:59:24 +0200 suphp (0.5.2-1) unstable; urgency=low * New upstream release -- Emmanuel Lacour Wed, 14 Jul 2004 01:25:55 +0200 suphp (0.5.1-1) unstable; urgency=low * New upstream release -- Emmanuel Lacour Sun, 29 Feb 2004 20:28:17 +0100 suphp (0.3-1) unstable; urgency=low * Initial Release. -- Emmanuel Lacour Fri, 19 Sep 2003 15:25:44 +0200 debian/suphp-common.docs0000644000000000000000000000001311103010231012435 0ustar doc/CONFIG debian/suphp-common.manpage.sgml0000644000000000000000000000641311103010231014070 0ustar manpage.1'. You may view the manual page with: `docbook-to-man manpage.sgml | nroff -man | less'. A typical entry in a Makefile or Makefile.am is: manpage.1: manpage.sgml docbook-to-man $< > $@ The docbook-to-man binary is found in the docbook-to-man package. Please remember that if you create the nroff version in one of the debian/rules file targets (such as build), you will need to include docbook-to-man in your Build-Depends control field. --> Emmanuel"> Lacour"> September 20, 2004"> 8"> elacour@home-dn.net"> suphp"> Debian"> GNU"> GPL"> ]>
&dhemail;
&dhfirstname; &dhsurname; 2004 &dhusername; &dhdate; &dhucpackage; &dhsection; &dhpackage; run php scripts with the owner permissions &dhpackage; php script DESCRIPTION &dhpackage; is a suid root binary used by apache mod_suphp to run php scripts with the owner permissions. It isn't intended to be run manually and needs some environment variables to be set, such as SCRIPT_FILENAME and DOCUMENT_ROOT. AUTHOR This manual page was written by &dhusername; &dhemail; for the &debian; system (but may be used by others). Permission is granted to copy, distribute and/or modify this document under the terms of the &gnu; General Public License, Version 2 any later version published by the Free Software Foundation. On Debian systems, the complete text of the GNU General Public License can be found in /usr/share/common-licenses/GPL.