Re: svn commit: r1241953 - /httpd/httpd/branches/2.4.x/INSTALL

2012-07-22 Thread Rainer Jung
Hi Jim, On 08.02.2012 17:01, j...@apache.org wrote: Author: jim Date: Wed Feb 8 16:01:34 2012 New Revision: 1241953 URL: http://svn.apache.org/viewvc?rev=1241953view=rev Log: remove -deps info from INSTALL Modified: httpd/httpd/branches/2.4.x/INSTALL Modified:

Re: svn commit: r1363557 - in /httpd/httpd/trunk: CHANGES docs/log-message-tags/next-number server/mpm/event/event.c server/mpm/worker/worker.c

2012-07-22 Thread Rainer Jung
On 19.07.2012 23:31, traw...@apache.org wrote: Author: trawick Date: Thu Jul 19 21:31:52 2012 New Revision: 1363557 URL: http://svn.apache.org/viewvc?rev=1363557view=rev Log: mpm_event, mpm_worker: Remain active amidst prevalent child process resource shortages. This is a somewhat different

mergeinfo ignorance

2012-07-22 Thread Jeff Trawick
On Sun, Jul 22, 2012 at 9:48 AM, rj...@apache.org wrote: Author: rjung Date: Sun Jul 22 13:48:30 2012 New Revision: 1364302 URL: http://svn.apache.org/viewvc?rev=1364302view=rev Log: Add mergeinfo for backports done by jim in r1200981. Is there a quick guide (like a couple of sentences ;)

Re: svn commit: r1363557 - in /httpd/httpd/trunk: CHANGES docs/log-message-tags/next-number server/mpm/event/event.c server/mpm/worker/worker.c

2012-07-22 Thread Jeff Trawick
On Sun, Jul 22, 2012 at 8:49 AM, Rainer Jung rainer.j...@kippdata.de wrote: On 19.07.2012 23:31, traw...@apache.org wrote: Author: trawick Date: Thu Jul 19 21:31:52 2012 New Revision: 1363557 URL: http://svn.apache.org/viewvc?rev=1363557view=rev Log: mpm_event, mpm_worker: Remain active

Re: mergeinfo ignorance

2012-07-22 Thread Rainer Jung
On 22.07.2012 16:14, Jeff Trawick wrote: On Sun, Jul 22, 2012 at 9:48 AM, rj...@apache.org wrote: Author: rjung Date: Sun Jul 22 13:48:30 2012 New Revision: 1364302 URL: http://svn.apache.org/viewvc?rev=1364302view=rev Log: Add mergeinfo for backports done by jim in r1200981. Is there a

Re: mergeinfo ignorance

2012-07-22 Thread Eric Covener
CAUTION: Always merge into a clean branch checkout and commit the whole branch. If you start to only commit parts of the branch after merging, svn will produce additional mergeinfo properties attached to sub directories or files. We don't want that. I might be a culprit here, I use

Re: mergeinfo ignorance

2012-07-22 Thread Rainer Jung
On 22.07.2012 16:59, Eric Covener wrote: CAUTION: Always merge into a clean branch checkout and commit the whole branch. If you start to only commit parts of the branch after merging, svn will produce additional mergeinfo properties attached to sub directories or files. We don't want that. I

Re: mpm-itk and upstream Apache, once again

2012-07-22 Thread Stefan Fritsch
On Thursday 19 July 2012, Graham Leggett wrote: On 19 Jul 2012, at 18:07, Tim Bannister is...@jellybaby.net wrote: On 19 Jul 2012, at 17:26, Nick Kew wrote: 2. Fixes to get Apache to drop the connection if it detects (during .htaccess lookup) that it would need to change the uid.

Re: mpm-itk and upstream Apache, once again

2012-07-22 Thread Stefan Fritsch
On Friday 20 July 2012, Steinar H. Gunderson wrote: On Fri, Jul 20, 2012 at 01:48:33PM -0400, Jeff Trawick wrote: Why would you keep mpm-itk separate but mod_privileges not? On reason may be that (at least in theory), mod_privileges is more secure: Under Solaris you cannot get uid 0 unless

Re: mpm-itk and upstream Apache, once again

2012-07-22 Thread Steinar H. Gunderson
On Sun, Jul 22, 2012 at 09:57:18PM +0200, Stefan Fritsch wrote: On reason may be that (at least in theory), mod_privileges is more secure: Under Solaris you cannot get uid 0 unless you already have all privileges, so an exploited httpd with mod_privileges does not give you root. Under Linux

Re: mpm-itk and upstream Apache, once again

2012-07-22 Thread Stefan Fritsch
On Sunday 22 July 2012, Steinar H. Gunderson wrote: On Sun, Jul 22, 2012 at 09:57:18PM +0200, Stefan Fritsch wrote: On reason may be that (at least in theory), mod_privileges is more secure: Under Solaris you cannot get uid 0 unless you already have all privileges, so an exploited httpd