Re: Passing LDFLAGS to Apache modules for hardened build flags

2012-04-14 Thread Arno Töll
On 14.04.2012 16:42, Moritz Mühlenhoff wrote: I can rebuild the Apache modules in the archive with test builds if that helps. I committed a fix to apxs in our VCS yesterday [1]. This will allow you to override LDFLAGS just like it is possible for CFLAGS. Moreover, this change automatically

Re: Passing LDFLAGS to Apache modules for hardened build flags

2012-04-14 Thread Moritz Mühlenhoff
On Mon, Apr 09, 2012 at 10:15:23PM +0200, Arno Töll wrote: Hi Moritz, On 08.04.2012 22:10, Moritz Muehlenhoff wrote: Hi, I'm working on hardened build flags for Squeeze and I'm looking into how to pass hardened build flags to Apache modules. Perhaps we should add hardening flags to

Processed: tagging 341022

2012-04-14 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: tags 341022 + pending Bug #341022 [apache2] default apache2.conf file should deny access to / Added tag(s) pending. thanks Stopping processing here. Please contact me if you need assistance. -- 341022:

Processed: tagging 649020

2012-04-14 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: tags 649020 + pending Bug #649020 [apache2.2-common] apache2: stronger and faster default SSL config Added tag(s) pending. thanks Stopping processing here. Please contact me if you need assistance. -- 649020:

Bug#605123: marked as done (apache2.2-common: incorrect definitions of Common Log Format and Combined Log Format)

2012-04-14 Thread Debian Bug Tracking System
Your message dated Sat, 14 Apr 2012 21:26:32 +0200 with message-id 201204142126.32783...@sfritsch.de and subject line Re: Bug#605123: apache2.2-common: incorrect definitions of Common Log Format and Combined Log Format has caused the Debian Bug report #605123, regarding apache2.2-common:

Bug#605123: apache2.2-common: incorrect definitions of Common Log Format and Combined Log Format

2012-04-14 Thread Christoph Anton Mitterer
On Sat, 2012-04-14 at 21:26 +0200, Stefan Fritsch wrote: We had that in the past. The problem with %b is that it gives no indication if the request was a partial request but always logs the size of the complete document. I think that the inaccuracies because of the headers are smaller than

Bug#605123: apache2.2-common: incorrect definitions of Common Log Format and Combined Log Format

2012-04-14 Thread Stefan Fritsch
On Saturday 14 April 2012, you wrote: Well than simply rename them? Or at least add a comment that this is not what people (or 3rd party products) may expect. ok, I will add a comment. -- To UNSUBSCRIBE, email to debian-apache-requ...@lists.debian.org with a subject of unsubscribe. Trouble?

Processed: tagging 548213, tagging 589638

2012-04-14 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: tags 548213 + pending Bug #548213 [apache2.2-common] Apache should protect .svn directories Added tag(s) pending. tags 589638 + pending Bug #589638 [apache2] apache2: Generally useful options currently set in sites-available/default should be

Changing the default document root for HTTP server

2012-04-14 Thread Arno Töll
Hello, (please keep replies limited to -devel; I'd just like to point relevant maintainers to this thread) I'd like to discuss a change related to the default document root for HTTP servers in Debian. On behalf of the Apache maintainers I consider this change a worthwhile idea, but we would like

Bug#668858: apache2: doesn't use UTF-8 by default

2012-04-14 Thread Adam Borowski
Package: apache2 Version: 2.4.1-3 Apache is one of the few things in Debian not configured to use UTF-8 by default. Considering that UTF-8 has been the default encoding for four releases already, GUI stuff doesn't really support ancient locales anymore and there's talk about dropping them from

Re: Changing the default document root for HTTP server

2012-04-14 Thread Daniel Baumann
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 04/15/2012 02:25 AM, Arno Töll wrote: /srv can't be used either as no path hierarchy is specified for /srv (e.g. think of /srv/www) and we really do not want to serve the entire /srv hierarchy as a document root either. packages should have a