Re: [users@httpd] How to get someone to look at a Apache bug report on Red Hat's Bugzilla?

2022-03-01 Thread Jeroen Verhoeckx
> Please keep your replies on the mailing list so that everyone can benefit > from the discussion. Oh, sorry, I probably click on Reply and not Reply All! Will keep an eye on that in the future! I'm worried that the version of Apache released by The Apache Software Foundation is less safe beca

Re: [users@httpd] How to get someone to look at a Apache bug report on Red Hat's Bugzilla?

2022-03-01 Thread Yehuda Katz
Please keep your replies on the mailing list so that everyone can benefit from the discussion. What is your "threat model" in which this way is less safe? For example: Are you worried that the packaged version from someone else has been modified with a backdoor? Are you worried that you would not

Re: [users@httpd] ProxyPass option mapping=servlet hurts mod_rewrite

2022-03-01 Thread Yann Ylavic
Hi, > > I have applied your patch to my httpd-2.4.52 and created two test cases. > One with a simple RewriteRule and a second one using a RewriteMap. > Both are working fine. :-) Thanks for testing! Now checked in https://svn.apache.org/r1898509 Regards; Yann. --

Re: [users@httpd] Is a home directory for the httpd user safe?

2022-03-01 Thread Tom Browder
On Sun, Feb 27, 2022 at 3:24 PM Stormy wrote: > > On 2022-02-27 10:31 a.m., Tom Browder wrote: > > On Sun, Feb 27, 2022 at 09:11 Jeroen Verhoeckx > > wrote: > > > >> Why do you need a predefined user with a writeable home directory? ... Sorry, I was not very clear: Raku has expectations about li

Re: [users@httpd] ProxyPass option mapping=servlet hurts mod_rewrite

2022-03-01 Thread Hendrik Harms
Hi Yann Anyway, could you please try the attached patch and see if it works for you? > I have applied your patch to my httpd-2.4.52 and created two test cases. One with a simple RewriteRule and a second one using a RewriteMap. Both are working fine. :-) Test logs attached: mod_rewrite_vs_proxy_p