Update Apache2 package

Currently, apache2 package does not allow to use -DBIG_SECURITY_HOLE flag.
This flag allow httpd daemon to run as root. It should be the responsability of the user to take this decision.
This patch add an option to set this flag. Previous behavior unchanged.

---
 package/apache/Config.in | 5 +++++
 package/apache/apache.mk | 4 ++++
 2 files changed, 9 insertions(+)

index 0814a17..ff0e822 100644
@@ -17,3 +17,8 @@ config BR2_PACKAGE_APACHE
 comment "apache needs a toolchain w/ dynamic library, threads"
 	depends on BR2_USE_MMU
 	depends on BR2_STATIC_LIBS || !BR2_TOOLCHAIN_HAS_THREADS
+
+if BR2_PACKAGE_APACHE
+config BR2_PACKAGE_APACHE_ALLOW_ROOT
+	bool "Allow apache running as root"
+endif

index daf8fe2..2e935b5 100644
@@ -35,6 +35,10 @@ APACHE_CONF_OPTS = \
 	--disable-lua \
 	--disable-luajit
 
+ifeq ($(BR2_PACKAGE_APACHE_ALLOW_ROOT),y)
+APACHE_CONF_OPTS += CFLAGS="$(TARGET_CFLAGS) -DBIG_SECURITY_HOLE"
+endif
+
 ifeq ($(BR2_ARCH_HAS_ATOMICS),y)
 APACHE_CONF_OPTS += --enable-nonportable-atomics=yes
 endif

2.6.1

Dear Geoffrey Ragot,

Thanks for your patch, and sorry for the slow response. However, we believe that running a web server as root is really a bad idea. All our other web servers (lighttpd, nginx, etc.) already default in Buildroot to run as the www-data user. We don't think we should encourage users to run apache as root.

For this reason, I've marked your patch as "Rejected" in our patch tracking system. Of course, don't hesitate to get back to us if you disagree with a good and valid use case for running apache as root :)

Thanks!

Thomas

Thomas Petazzoni, CTO, Free Electrons
Embedded Linux, Kernel and Android engineering
http://free-electrons.com