Re: [VOTE] Release Apache httpd 2.4.4 as GA

Reindl Harald Tue, 19 Feb 2013 09:15:53 -0800

Am 19.02.2013 18:03, schrieb Rainer Jung:
> On 18.02.2013 21:34, Jim Jagielski wrote:
>> The pre-release test tarballs for Apache httpd 2.4.4 can be found
>> at the usual place:
>>
>>      http://httpd.apache.org/dev/dist/
>>
>> I'm calling a VOTE on releasing these as Apache httpd 2.4.4 GA.
>> NOTE: The -deps tarballs are included here *only* to make life
>> easier for the tester. They will not be, and are not, part
>> of the official release.
>>
>> [ ] +1: Good to go
>> [ ] +0: meh
>> [ ] -1: Danger Will Robinson. And why.
> 
> Currently unfortunately -1:
> 
> I see a graceful restart problem using prefork or worker MPM when
> configuring two listeners. SSL not needed, just two http ports.
> 
> It is most easily seen using prefork and activating the server-status:
> each graceful restarts adds hanging "G" processes, even if there's no
> load and the only requests are looking at server-status after each
> graceful restart. Processes hang in the accept mutex. Process table also
> shows the old hanging processes.
> 
> With worker the server-status does not show the "G" states, but in the
> process table one can see some of the old processes not being terminated
> and hanging in the accept mutex.
> 
> With event or only one listener I could not yet reproduce.
> 
> I also see crashes during restarts, but currently no easy reproduction
> scenario, maybe related. We'll see.
> 
> Plattform is Solaris 10 Sparc. I would be interested in hearing if
> anyone else can reproduce. Will try myself on Linux later


at least not on Fedora 18 with my custom build which
is a nearly vanilla-one without of the most patches
and i have attached the SPEC-file
______________________________________________________

[root@testserver:~]$ cat /home/builduser/config.sh
#!/usr/bin/bash

if ([ "$HOSTTYPE" == "x86_64" ])
 then
  RH_ARCH='corei7'
  RH_TUNE='corei7'
  RH_SSE4="-msse4.1 -msse4.2"
  RH_TARGET="x86_64-redhat-linux"
fi

source /home/builduser/config.sh
export CFLAGS="-O3 -march=$RH_TUNE -mtune=$RH_TUNE -mmmx -msse2 -msse3 $RH_SSE4 
-maes -fopenmp -mfpmath=sse -pipe
-fno-strict-aliasing -fstack-protector --param=ssp-buffer-size=4 
-Wno-pointer-sign -D_FORTIFY_SOURCE=2"
export CXXFLAGS="-O3 -march=$RH_TUNE -mtune=$RH_TUNE -mmmx -msse2 -msse3 
$RH_SSE4 -maes -fopenmp -mfpmath=sse
-fstack-protector --param=ssp-buffer-size=4 -D_FORTIFY_SOURCE=2"
SH_LDFLAGS="-Wl,-z,relro"
export CFLAGS SH_LDFLAGS
______________________________________________________

[root@rh:~]$ netstat -l | grep httpd
tcp        0      0 0.0.0.0:443             0.0.0.0:*               LISTEN      
25387/httpd
tcp        0      0 0.0.0.0:80              0.0.0.0:*               LISTEN      
25387/httpd
______________________________________________________

[root@rh:~]$ cat apache_error.log
[Tue Feb 19 18:07:40.984507 2013] [mpm_prefork:notice] [pid 32321] AH00171: 
Graceful restart requested, doing restart
[Tue Feb 19 18:07:41.039834 2013] [auth_digest:notice] [pid 32321] AH01757: 
generating secret for digest
authentication ...
[Tue Feb 19 18:07:41.040447 2013] [ssl:notice] [pid 32321] AH01886: SSL FIPS 
mode disabled
[Tue Feb 19 18:07:42.000219 2013] [:notice] [pid 32321] mod_bw : Memory 
Allocated 160 bytes (each conf takes 32 bytes)
[Tue Feb 19 18:07:42.000254 2013] [:notice] [pid 32321] mod_bw : Version 0.8 - 
Initialized [5 Confs]
[Tue Feb 19 18:07:42.059291 2013] [mpm_prefork:notice] [pid 32321] AH00163: 
Apache/2.4.4 (Fedora)
OpenSSL/1.0.1c-fips SVN/1.7.8 sffe configured -- resuming normal operations
[Tue Feb 19 18:07:42.059303 2013] [core:notice] [pid 32321] AH00094: Command 
line: '/usr/sbin/httpd -D workstation'
______________________________________________________

modules from phpinfo():

core mod_so http_core mod_version mod_unixd prefork mod_filter mod_authz_core 
mod_authn_core mod_socache_shmcb
mod_auth_basic mod_auth_digest mod_authn_file mod_authz_host mod_authz_user 
mod_authz_groupfile mod_log_config
mod_env mod_setenvif mod_mime mod_autoindex mod_dir mod_alias mod_headers 
mod_deflate mod_rewrite mod_expires
mod_ssl mod_security2 mod_unique_id mod_remoteip mod_dav mod_dav_svn 
mod_authz_svn mod_h264_streaming mod_proxy
mod_proxy_http mod_status mod_bw mod_cgi mod_php5

%define contentdir %{_datadir}/httpd
%define docroot /var/www
%define suexec_caller apache
%define mmn 20120211
%define mmnisa %{mmn}-%{__isa_name}-%{__isa_bits}
%define vstring Fedora

# Drop automatic provides for module DSOs
%{?filter_setup:
%filter_provides_in %{_libdir}/httpd/modules/.*\.so$
%filter_setup
}

Summary:           Apache HTTP Server
Name:              httpd
Version:           2.4.4
Release:           4%{?dist}
URL:               http://httpd.apache.org/
Source0:           http://www.apache.org/dist/httpd/httpd-%{version}.tar.bz2
Source1:           httpd.sysconf
Source2:           httpd.tmpfiles
Source3:           httpd.service
Patch1:            httpd-2.4.1-apctl.patch
Patch2:            httpd-2.4.3-apxs.patch
Patch3:            httpd-2.4.1-deplibs.patch
Patch4:            httpd-2.4.3-layout.patch
License:           ASL 2.0
Group:             System Environment/Daemons
BuildRoot:         %{_tmppath}/%{name}-%{version}-%{release}-root
BuildRequires:     autoconf, perl, pkgconfig, findutils, xmlto
BuildRequires:     zlib-devel, libselinux-devel, lua-devel
BuildRequires:     apr-devel >= 1.4.0, apr-util-devel >= 1.2.0, pcre-devel >= 5.0
Requires:          /etc/mime.types
Obsoletes:         httpd-suexec
Provides:          webserver
Provides:          mod_dav = %{version}-%{release}, httpd-suexec = %{version}-%{release}
Provides:          httpd-mmn = %{mmn}, httpd-mmn = %{mmnisa}
Requires:          httpd-tools = %{version}-%{release}
Requires(pre):     /usr/sbin/useradd
Requires(preun):   systemd-units
Requires(postun):  systemd-units
Requires(post):    systemd-units
%description

%package           devel
Group:             Development/Libraries
Summary:           Development interfaces for the Apache HTTP server
Obsoletes:         secureweb-devel, apache-devel, stronghold-apache-devel
Requires:          apr-devel, apr-util-devel, pkgconfig
Requires:          httpd = %{version}-%{release}
%description       devel

%package           manual
Group:             Documentation
Summary:           Documentation for the Apache HTTP server
Requires:          httpd = %{version}-%{release}
Obsoletes:         secureweb-manual, apache-manual
BuildArch:         noarch
%description       manual

%package           tools
Group:             System Environment/Daemons
Summary:           Tools for use with the Apache HTTP Server
%description       tools

%package -n        mod_ssl
Group:             System Environment/Daemons
Summary:           SSL/TLS module for the Apache HTTP Server
Epoch:             1
BuildRequires:     openssl-devel
Requires(post):    openssl, /bin/cat
Requires(pre):     httpd
Requires:          httpd = 0:%{version}-%{release}, httpd-mmn = %{mmnisa}
Obsoletes:         stronghold-mod_ssl
%description -n    mod_ssl

%package -n        mod_proxy_html
Group:             System Environment/Daemons
Summary:           HTML and XML content filters for the Apache HTTP Server
Requires:          httpd = 0:%{version}-%{release}, httpd-mmn = %{mmnisa}
BuildRequires:     libxml2-devel
Epoch:             1
Obsoletes:         mod_proxy_html < 1:2.4.1-2
%description -n    mod_proxy_html

%package           extras
Group:             System Environment/Daemons
Summary:           not often used apache modules
Requires:          httpd = 0:%{version}-%{release}, httpd-mmn = %{mmnisa}
%description       extras

%prep
%setup -q
%patch1 -p1 -b .apctl
%patch2 -p1 -b .apxs
%patch3 -p1 -b .deplibs
%patch4 -p1 -b .layout

# Patch in the vendor string
sed -i '/^#define PLATFORM/s/Unix/%{vstring}/' os/unix/os.h

# Prevent use of setcap in "install-suexec-caps" target.
sed -i '/suexec/s,setcap ,echo Skipping setcap for ,' Makefile.in

# Safety check: prevent build if defined MMN does not equal upstream MMN.
vmmn=`echo MODULE_MAGIC_NUMBER_MAJOR | cpp -include include/ap_mmn.h | sed -n '/^2/p'`
if test "x${vmmn}" != "x%{mmn}"; then
   : Error: Upstream MMN is now ${vmmn}, packaged MMN is %{mmn}
   : Update the mmn macro and rebuild.
   exit 1
fi
: Building with MMN %{mmn}, MMN-ISA %{mmnisa} and vendor string '%{vstring}'

%build
# forcibly prevent use of bundled apr, apr-util, pcre
rm -rf srclib/{apr,apr-util,pcre}

# regenerate configure scripts
autoheader && autoconf || exit 1

# Before configure; fix location of build dir in generated apxs
%{__perl} -pi -e "s:\@exp_installbuilddir\@:%{_libdir}/httpd/build:g" support/apxs.in

source /home/builduser/config.sh
export CFLAGS="-O3 -march=$RH_TUNE -mtune=$RH_TUNE -mmmx -msse2 -msse3 $RH_SSE4 -maes -fopenmp -mfpmath=sse -pipe -fno-strict-aliasing -fstack-protector --param=ssp-buffer-size=4 -Wno-pointer-sign -D_FORTIFY_SOURCE=2"
export CXXFLAGS="-O3 -march=$RH_TUNE -mtune=$RH_TUNE -mmmx -msse2 -msse3 $RH_SSE4 -maes -fopenmp -mfpmath=sse -fstack-protector --param=ssp-buffer-size=4 -D_FORTIFY_SOURCE=2"
SH_LDFLAGS="-Wl,-z,relro"
export CFLAGS SH_LDFLAGS

# Hard-code path to links to avoid unnecessary builddep
export LYNX_PATH=/usr/bin/links

# Build the daemon
./configure \
 --prefix=%{_sysconfdir}/httpd \
 --exec-prefix=%{_prefix} \
 --bindir=%{_bindir} \
 --sbindir=%{_sbindir} \
 --mandir=%{_mandir} \
 --libdir=%{_libdir} \
 --sysconfdir=%{_sysconfdir}/httpd/conf \
 --includedir=%{_includedir}/httpd \
 --libexecdir=%{_libdir}/httpd/modules \
 --datadir=%{contentdir} \
 --enable-layout=Fedora \
 --with-installbuilddir=%{_libdir}/httpd/build \
 --with-mpm=prefork \
 --enable-mpms-shared=prefork \
 --with-apr=%{_prefix} \
 --with-apr-util=%{_prefix} \
 --enable-pie \
 --with-pcre \
 --enable-mods-shared=all \
 --enable-ssl \
 --with-ssl \
 --disable-distcache \
 --enable-proxy \
 --enable-cache \
 --enable-disk-cache \
 --enable-cgi \
 --enable-authn-anon \
 --enable-authn-alias \
 --disable-imagemap  \
 --disable-session
	$*
make %{?_smp_mflags}

%install
rm -rf $RPM_BUILD_ROOT
make DESTDIR=$RPM_BUILD_ROOT install

# systemd-unit
mkdir -p $RPM_BUILD_ROOT%{_unitdir}
install -m 0644 %{SOURCE3} $RPM_BUILD_ROOT%{_unitdir}/httpd.service

# install conf file/directory
mkdir $RPM_BUILD_ROOT%{_sysconfdir}/httpd/conf.d 

# tmpfiles.d configuration
mkdir -p $RPM_BUILD_ROOT%{_prefix}/lib/tmpfiles.d 
install -m 644 -p $RPM_SOURCE_DIR/httpd.tmpfiles $RPM_BUILD_ROOT%{_prefix}/lib/tmpfiles.d/httpd.conf

# Other directories
mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/lib/dav

# Create cache directory
mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/cache/httpd $RPM_BUILD_ROOT%{_localstatedir}/cache/httpd/proxy $RPM_BUILD_ROOT%{_localstatedir}/cache/httpd/ssl

# Make the MMN accessible to module packages
echo %{mmnisa} > $RPM_BUILD_ROOT%{_includedir}/httpd/.mmn
mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/rpm
cat > $RPM_BUILD_ROOT%{_sysconfdir}/rpm/macros.httpd <<EOF
%%_httpd_mmn %{mmnisa}
%%_httpd_apxs %%{_bindir}/apxs
%%_httpd_modconfdir %%{_sysconfdir}/httpd/conf.modules.d
%%_httpd_confdir %%{_sysconfdir}/httpd/conf.d
%%_httpd_contentdir %{contentdir}
%%_httpd_moddir %%{_libdir}/httpd/modules
EOF

# remove manual sources
find $RPM_BUILD_ROOT%{contentdir}/manual \( \
    -name \*.xml -o -name \*.xml.* -o -name \*.ent -o -name \*.xsl -o -name \*.dtd \
    \) -print0 | xargs -0 rm -f

# Strip the manual down just to English and replace the typemaps with flat files:
set +x
for f in `find $RPM_BUILD_ROOT%{contentdir}/manual -name \*.html -type f`; do
   if test -f ${f}.en; then
      cp ${f}.en ${f}
      rm ${f}.*
   fi
done
set -x

# Clean Document Root
rm -v $RPM_BUILD_ROOT%{docroot}/html/*.html $RPM_BUILD_ROOT%{docroot}/cgi-bin/*

# symlinks for /etc/httpd
ln -s ../..%{_localstatedir}/log/httpd $RPM_BUILD_ROOT/etc/httpd/logs
ln -s /run/httpd $RPM_BUILD_ROOT/etc/httpd/run
ln -s ../..%{_libdir}/httpd/modules $RPM_BUILD_ROOT/etc/httpd/modules

# fix man page paths
sed -e "s|/usr/local/apache2/conf/httpd.conf|/etc/httpd/conf/httpd.conf|" \
    -e "s|/usr/local/apache2/conf/mime.types|/etc/mime.types|" \
    -e "s|/usr/local/apache2/conf/magic|/etc/httpd/conf/magic|" \
    -e "s|/usr/local/apache2/logs/error_log|/var/log/httpd/error_log|" \
    -e "s|/usr/local/apache2/logs/access_log|/var/log/httpd/access_log|" \
    -e "s|/usr/local/apache2/logs/httpd.pid|/run/httpd/httpd.pid|" \
    -e "s|/usr/local/apache2|/etc/httpd|" < docs/man/httpd.8 \
  > $RPM_BUILD_ROOT%{_mandir}/man8/httpd.8

# Make ap_config_layout.h libdir-agnostic
sed -i '/.*DEFAULT_..._LIBEXECDIR/d;/DEFAULT_..._INSTALLBUILDDIR/d' $RPM_BUILD_ROOT%{_includedir}/httpd/ap_config_layout.h

# Fix path to instdso in special.mk
sed -i '/instdso/s,top_srcdir,top_builddir,' $RPM_BUILD_ROOT%{_libdir}/httpd/build/special.mk

# Remove unpackaged files
rm -rfv %{contentdir}/htdocs 
rm -rfv $RPM_BUILD_ROOT/etc/httpd/conf/{original,extra} 
rm -rfv $RPM_BUILD_ROOT/usr/share/httpd/icons/ 
rm -rfv $RPM_BUILD_ROOT/usr/share/httpd/error/
rm -vf $RPM_BUILD_ROOT%{_sysconfdir}/httpd/conf/*.conf
rm -vf $RPM_BUILD_ROOT/docs/conf/extra/httpd-{ssl,userdir}.conf
rm -vf $RPM_BUILD_ROOT%{_libdir}/*.exp 
rm -vf $RPM_BUILD_ROOT/etc/httpd/conf/mime.types 
rm -vf $RPM_BUILD_ROOT%{_libdir}/httpd/modules/*.exp 
rm -vf $RPM_BUILD_ROOT%{_libdir}/httpd/modules/mod_authnz_ldap.so
rm -vf $RPM_BUILD_ROOT%{_libdir}/httpd/build/config.nice 
rm -vf $RPM_BUILD_ROOT%{_bindir}/ap?-config 
rm -vf $RPM_BUILD_ROOT%{_sbindir}/{checkgid,dbmmanage,envvars*} 
rm -vf $RPM_BUILD_ROOT%{contentdir}/htdocs/* 
rm -vf $RPM_BUILD_ROOT%{_mandir}/man1/dbmmanage.* 
rm -vf $RPM_BUILD_ROOT%{contentdir}/cgi-bin/*
rm -vf $RPM_BUILD_ROOT/usr/sbin/fcgistarter 
rm -vf $RPM_BUILD_ROOT/usr/sbin/rotatelogs 
rm -vf $RPM_BUILD_ROOT%{_mandir}/man8/fcgistarter*
rm -vf $RPM_BUILD_ROOT%{_mandir}/man8/rotatelogs*
rm -vf $RPM_BUILD_ROOT%{_mandir}/man8/suexec*

%pre
/usr/sbin/useradd -c "Apache" -u 48 -s /sbin/nologin -r -d %{contentdir} apache 2> /dev/null || :
exit 0

%post
/usr/bin/systemctl --system daemon-reload 2> /dev/null > /dev/null
exit 0

%preun
if [ $1 == 0 ]; then
 /usr/bin/systemctl --no-reload disable httpd.service 2> /dev/null > /dev/null
 /usr/bin/systemctl stop httpd.service 2> /dev/null > /dev/null
fi
exit 0

%check
if readelf -d $RPM_BUILD_ROOT%{_libdir}/httpd/modules/*.so | grep TEXTREL; then
 : modules contain non-relocatable code
 exit 1
fi
exit 0

%clean
rm -rf $RPM_BUILD_ROOT

%files
%defattr(-,root,root)
%dir %{_sysconfdir}/httpd
%{_sysconfdir}/httpd/modules
%{_sysconfdir}/httpd/logs
%{_sysconfdir}/httpd/run
%dir %{_sysconfdir}/httpd/conf
%config(noreplace) %{_sysconfdir}/httpd/conf/magic
%dir %{_sysconfdir}/httpd/conf.d
%{_prefix}/lib/tmpfiles.d/httpd.conf
%{_sbindir}/ht*
%{_sbindir}/apachectl
%dir %{_libdir}/httpd
%dir %{_libdir}/httpd/modules
%{_libdir}/httpd/modules/mod*.so
%exclude %{_libdir}/httpd/modules/mod_authn_dbd.so
%exclude %{_libdir}/httpd/modules/mod_authn_dbm.so
%exclude %{_libdir}/httpd/modules/mod_authz_dbd.so
%exclude %{_libdir}/httpd/modules/mod_authz_dbm.so
%exclude %{_libdir}/httpd/modules/mod_buffer.so
%exclude %{_libdir}/httpd/modules/mod_cache_disk.so
%exclude %{_libdir}/httpd/modules/mod_cache.so
%exclude %{_libdir}/httpd/modules/mod_charset_lite.so
%exclude %{_libdir}/httpd/modules/mod_data.so
%exclude %{_libdir}/httpd/modules/mod_dav_fs.so
%exclude %{_libdir}/httpd/modules/mod_dav_lock.so
%exclude %{_libdir}/httpd/modules/mod_dbd.so
%exclude %{_libdir}/httpd/modules/mod_dialup.so
%exclude %{_libdir}/httpd/modules/mod_dumpio.so
%exclude %{_libdir}/httpd/modules/mod_echo.so
%exclude %{_libdir}/httpd/modules/mod_ext_filter.so
%exclude %{_libdir}/httpd/modules/mod_file_cache.so
%exclude %{_libdir}/httpd/modules/mod_heartbeat.so
%exclude %{_libdir}/httpd/modules/mod_heartmonitor.so
%exclude %{_libdir}/httpd/modules/mod_include.so
%exclude %{_libdir}/httpd/modules/mod_lbmethod_bybusyness.so
%exclude %{_libdir}/httpd/modules/mod_lbmethod_byrequests.so
%exclude %{_libdir}/httpd/modules/mod_lbmethod_bytraffic.so
%exclude %{_libdir}/httpd/modules/mod_lbmethod_heartbeat.so
%exclude %{_libdir}/httpd/modules/mod_log_debug.so
%exclude %{_libdir}/httpd/modules/mod_log_forensic.so
%exclude %{_libdir}/httpd/modules/mod_logio.so
%exclude %{_libdir}/httpd/modules/mod_lua.so
%exclude %{_libdir}/httpd/modules/mod_negotiation.so
%exclude %{_libdir}/httpd/modules/mod_proxy_ajp.so
%exclude %{_libdir}/httpd/modules/mod_proxy_balancer.so
%exclude %{_libdir}/httpd/modules/mod_proxy_connect.so
%exclude %{_libdir}/httpd/modules/mod_proxy_express.so
%exclude %{_libdir}/httpd/modules/mod_proxy_fcgi.so
%exclude %{_libdir}/httpd/modules/mod_proxy_fdpass.so
%exclude %{_libdir}/httpd/modules/mod_proxy_ftp.so
%exclude %{_libdir}/httpd/modules/mod_proxy_html.so
%exclude %{_libdir}/httpd/modules/mod_proxy_scgi.so
%exclude %{_libdir}/httpd/modules/mod_reflector.so
%exclude %{_libdir}/httpd/modules/mod_reqtimeout.so
%exclude %{_libdir}/httpd/modules/mod_request.so
%exclude %{_libdir}/httpd/modules/mod_sed.so
%exclude %{_libdir}/httpd/modules/mod_slotmem_plain.so
%exclude %{_libdir}/httpd/modules/mod_slotmem_shm.so
%exclude %{_libdir}/httpd/modules/mod_socache_memcache.so
%exclude %{_libdir}/httpd/modules/mod_speling.so
%exclude %{_libdir}/httpd/modules/mod_ssl.so
%exclude %{_libdir}/httpd/modules/mod_usertrack.so
%exclude %{_libdir}/httpd/modules/mod_watchdog.so
%exclude %{_libdir}/httpd/modules/mod_xml2enc.so
%exclude %{_mandir}/man8/*
%exclude %{_mandir}/man1/*
%attr(0710,root,apache) %dir /run/httpd
%attr(0700,root,root) %dir %{_localstatedir}/log/httpd
%attr(0700,apache,apache) %dir %{_localstatedir}/lib/dav
%attr(0700,apache,apache) %dir %{_localstatedir}/cache/httpd
%attr(0700,apache,apache) %dir %{_localstatedir}/cache/httpd/proxy
%{_unitdir}/*.service

%files tools
%defattr(-,root,root)
%{_bindir}/*
%exclude %{_bindir}/apxs

%files manual
%defattr(-,root,root)
%{contentdir}/manual
%{_mandir}/man8/*
%{_mandir}/man1/*

%files -n mod_ssl
%defattr(-,root,root)
%{_libdir}/httpd/modules/mod_ssl.so
%attr(0700,apache,root) %dir %{_localstatedir}/cache/httpd/ssl

%files -n mod_proxy_html
%defattr(-,root,root)
%{_libdir}/httpd/modules/mod_proxy_html.so
%{_libdir}/httpd/modules/mod_xml2enc.so

%files extras
%defattr(-,root,root)
%{_libdir}/httpd/modules/mod_authn_dbd.so
%{_libdir}/httpd/modules/mod_authn_dbm.so
%{_libdir}/httpd/modules/mod_authz_dbd.so
%{_libdir}/httpd/modules/mod_authz_dbm.so
%{_libdir}/httpd/modules/mod_buffer.so
%{_libdir}/httpd/modules/mod_cache_disk.so
%{_libdir}/httpd/modules/mod_cache.so
%{_libdir}/httpd/modules/mod_charset_lite.so
%{_libdir}/httpd/modules/mod_data.so
%{_libdir}/httpd/modules/mod_dav_fs.so
%{_libdir}/httpd/modules/mod_dav_lock.so
%{_libdir}/httpd/modules/mod_dbd.so
%{_libdir}/httpd/modules/mod_dialup.so
%{_libdir}/httpd/modules/mod_dumpio.so
%{_libdir}/httpd/modules/mod_echo.so
%{_libdir}/httpd/modules/mod_ext_filter.so
%{_libdir}/httpd/modules/mod_file_cache.so
%{_libdir}/httpd/modules/mod_heartbeat.so
%{_libdir}/httpd/modules/mod_heartmonitor.so
%{_libdir}/httpd/modules/mod_include.so
%{_libdir}/httpd/modules/mod_lbmethod_bybusyness.so
%{_libdir}/httpd/modules/mod_lbmethod_byrequests.so
%{_libdir}/httpd/modules/mod_lbmethod_bytraffic.so
%{_libdir}/httpd/modules/mod_lbmethod_heartbeat.so
%{_libdir}/httpd/modules/mod_log_debug.so
%{_libdir}/httpd/modules/mod_log_forensic.so
%{_libdir}/httpd/modules/mod_logio.so
%{_libdir}/httpd/modules/mod_lua.so
%{_libdir}/httpd/modules/mod_negotiation.so
%{_libdir}/httpd/modules/mod_proxy_ajp.so
%{_libdir}/httpd/modules/mod_proxy_balancer.so
%{_libdir}/httpd/modules/mod_proxy_connect.so
%{_libdir}/httpd/modules/mod_proxy_express.so
%{_libdir}/httpd/modules/mod_proxy_fcgi.so
%{_libdir}/httpd/modules/mod_proxy_fdpass.so
%{_libdir}/httpd/modules/mod_proxy_ftp.so
%{_libdir}/httpd/modules/mod_proxy_scgi.so
%{_libdir}/httpd/modules/mod_reflector.so
%{_libdir}/httpd/modules/mod_reqtimeout.so
%{_libdir}/httpd/modules/mod_request.so
%{_libdir}/httpd/modules/mod_sed.so
%{_libdir}/httpd/modules/mod_slotmem_plain.so
%{_libdir}/httpd/modules/mod_slotmem_shm.so
%{_libdir}/httpd/modules/mod_socache_memcache.so
%{_libdir}/httpd/modules/mod_speling.so
%{_libdir}/httpd/modules/mod_usertrack.so
%{_libdir}/httpd/modules/mod_watchdog.so

%files devel
%defattr(-,root,root)
%{_includedir}/httpd
%{_bindir}/apxs
%dir %{_libdir}/httpd/build
%{_libdir}/httpd/build/*.mk
%{_libdir}/httpd/build/*.sh
%{_sysconfdir}/rpm/macros.httpd

%changelog
* Tue Feb 19 2013 Reindl Harald <[email protected]>
- update to 2.4.4 RC
- remove a lot of patches
- remove "mod_authnz_ldap.so" from package

* Wed Jan 30 2013 Reindl Harald <[email protected]>
- remove default "httpd.conf" from package 
- add security options to "httpd.service"
  - CapabilityBoundingSet=~CAP_SYS_PTRACE
  - InaccessibleDirectories=/boot
  - InaccessibleDirectories=/home
  - InaccessibleDirectories=/usr/local/scripts
  - InaccessibleDirectories=/var/lib/rpm
  - InaccessibleDirectories=/var/spool
- prepare additional folders for "InaccessibleDirectories"
  in the hope systemd will in the future not refuse to
  start the service if non-existing ones are listed

* Thu Jan 24 2013 Reindl Harald <[email protected]>
- removed unused parts like ldap, suexec....
- split most modules in "httpd-extras" package
- remove nearly anything

* Mon Jan 14 2013 Reindl Harald <[email protected]>
- start migration to Apache 2.4 
- restore our own systemd-unit
- disable automatic restart on package updates 
- optimized rebuild

signature.asc
Description: OpenPGP digital signature

Re: [VOTE] Release Apache httpd 2.4.4 as GA

Reply via email to