aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorLines
2015-04-19Return the new fd directly from setup_socket()Furkan Sahin-4/+8
We either have a proper descriptor (>0) or an error (<0) so we don't strictly need the fd_out parameter
2015-04-19Merge remote-tracking branch 'stromnet/socket_cleanup'Furkan Sahin-4/+33
Fixes: https://github.com/gnosek/fcgiwrap/pull/26
2015-04-17Explicit license info in README and COPYINGFurkan Sahin-0/+27
2015-04-19Merge pull request #27 from justinclift/masterFurkan Sahin-0/+2
Added pkg-config to the requirements
2015-03-19Added pkg-config to the requirementsFurkan Sahin-0/+2
2014-08-15Use-after-free fixFurkan Sahin-4/+6
2014-08-15SIGTERM, not SIGQUIT..Furkan Sahin-1/+1
2014-08-15Clean up unix socket on exit so we can start properly.Furkan Sahin-3/+30
If unix socket is not cleaned up, we will fail to bind on it the next startup round (Address already in use).
2014-01-09Merge pull request #20 from Lekensteyn/fix-bug-18Furkan Sahin-1/+1
prefork: Fix 100% CPU usage in parent process
2014-01-09prefork: Fix 100% CPU usage in parent processFurkan Sahin-1/+1
When a child process is terminated, the parent calls waitpid() to check for dead children. This returns -1 on error (e.g. there are no other children or a signal interrupted waitpid()), the pid (> 0) for dead children OR 0 if there are some children which are still alive. Fixes gnosek/fcgiwrap#18.
2013-05-07Add info about Spanish translationFurkan Sahin-0/+3
2013-04-15Merge pull request #12 from Lekensteyn/restrict-program2Furkan Sahin-2/+27
Add `-p path` option to restrict scripts
2013-04-13Add `-p path` option to restrict scriptsFurkan Sahin-2/+27
If the purpose of fcgiwrap is to wrap cgit, then I want to be sure that no other program can be executed under the privileges of the fcgiwrap user. When the option `-p path` is given, only the programs specified by `path` are allowed to execute (multiple occurrences of `-p` are merged to form a list of allowed programs). Note that this value will be matched literally, no attempt is done to canonicalize the path. This also implies that glob patterns or directories will never match.
2013-02-03Update READMEFurkan Sahin-2/+6
2013-02-03Bump version numberFurkan Sahin-2/+2
2013-02-03Add help for -f optionFurkan Sahin-0/+1
2013-02-03Close FCGI socket before executing scriptFurkan Sahin-0/+2
We do it in a rather violent way to avoid FCGI shutdown (the parent must keep the socket alive and working)
2013-02-03Unify CGI error handlingFurkan Sahin-7/+7
Use the same error handler for 403s and 502s. This basically ports the required fixes from error_403 (previous commit) to the 502 error on failed exec(). Two user-visible side effects: - error message now says "403 Forbidden" instead of "403" - failed exec() gets logged over stderr (also, use \r\n instead of \n as a line seprator but that has been fixed up by the parent process before).
2013-02-03Fix 403 error handlingFurkan Sahin-19/+21
Report 403 errors over normal stdout/stderr (after setting up the pipes). Properly reporting the error response over stdout requires: - flushing the I/O, which would otherwise get buffered - skipping atexit handlers (would otherwise close the FCGI connection cleanly, interfering with the parent process still trying to talk over it)
2013-02-03Check file permissions even when we get full path over FastCGIFurkan Sahin-0/+2
It's not a security issue (executing the file would fail, anyway) but it's a sensible sanity check.
2012-09-08Merge pull request #8 from falconindy/masterFurkan Sahin-3/+5
Minor buildsys fixes
2012-09-08Correct invalid defintion in configuring systemd supportFurkan Sahin-2/+1
This was an unfortunate copypasta error that slipped in with ba06d8a8c. The HAVE_SYSTEMD macro should only be defined based on the presence of the library, not the unit files, since the units are useless without the library support.
2012-09-08Makefile.in: define dummy datarootdir variableFurkan Sahin-0/+1
This suppresses a warning on ./configure for a directory which fcgiwrap does not use: config.status: WARNING: 'Makefile.in' seems to ignore the --datarootdir setting
2012-08-23simplify build rule for fcgiwrapFurkan Sahin-1/+3
Add flags and libraries to the respective environment vars and let make figure out the order on its own. This provides support for unmentioned vars such as LDFLAGS implicitly, as the compilation rule isn't explicitly defined.
2012-08-21Merge pull request #7 from falconindy/systemdFurkan Sahin-0/+32
add systemd unit files for installation
2012-08-21add systemd unit files for installationFurkan Sahin-0/+32
These are automatically installed iff systemd support is compiled into fcgiwrap.
2012-08-21Merge pull request #6 from falconindy/systemdFurkan Sahin-24/+59
systemd socket activation support
2012-08-19Cleanup -Wmissing-prototypes compiler warningsFurkan Sahin-5/+5
2012-08-19Add support for socket activation via systemdFurkan Sahin-1/+30
This prevents the need for starting fcgiwrap explicitly, or using a tool such as spawn-fcgi. The type of socket does not matter, we merely accept a single FD passed from pid 1 and listen on it.
2012-08-19split listen() logic into separate functionFurkan Sahin-18/+24
2011-12-08Merge pull request #5 from goochjj/masterFurkan Sahin-2/+16
STDERR redirection back through the FCGI socket
2011-12-08fix manpage - add -f optionFurkan Sahin-0/+6
2011-12-07Create -f option to allow sending stderr to fcgi logsFurkan Sahin-2/+10
2010-09-15support LDFLAGSFurkan Sahin-1/+1
2010-09-01Add missing escaping to minus signs.Furkan Sahin-2/+2
"-" must be escaped ("\-") to be interpreted as minus. Signed-off-by: Jordi Mallach <jordi@debian.org>
2010-08-23[GH-2] Advance configure.ac version to 1.0.3Furkan Sahin-1/+1
2010-08-14fixing compilation under FreeBSDFurkan Sahin-0/+1
2010-06-11Create folder for man prior to the installation.Furkan Sahin-0/+2
2010-06-03Add `-s' option to enable binding by fcgiwrap itselfFurkan Sahin-4/+144
This should ease testing and deployment in simpler cases
2010-06-03Use SCRIPT_FILENAME environment variable when availableFurkan Sahin-4/+16
If present, it overrides DOCUMENT_ROOT and SCRIPT_NAME and prevents mangling of PATH_INFO. Should allow cleaner configs when script names don't come from request URIs directly.
2010-06-02Jordi Mallach's email has been corrected as requested by him.Furkan Sahin-1/+2
He's been added to the contributors in README.rst.
2010-05-25added handling of manpages to makefileFurkan Sahin-1/+2
2010-05-25adjusted option _-c_ help textFurkan Sahin-1/+1
2010-05-25fcgiwrap to rely on definitions provided by autoconf/autoreconfFurkan Sahin-7/+12
2010-05-25nitpicks as described in today's email to MarkFurkan Sahin-4/+4
Signed-off-by: W-Mark Kubacki <wmark@hurrikane.de>
2010-05-25renamed: gnosek-fcgiwrap.8 -> fcgiwrap.8Furkan Sahin-0/+0
2010-05-25added configuration examples to manpageFurkan Sahin-1/+45
2010-05-25replaced occurences of 'gnosek-fcgiwrap' by 'fcgiwrap'Furkan Sahin-4/+4
2010-05-25manpage as contributed by Jordi MallachFurkan Sahin-0/+38
Signed-off-by: W-Mark Kubacki <wmark@hurrikane.de>
2010-03-22help screen, along with version set to 1.0Furkan Sahin-1/+13