102 lines
3.0 KiB
Diff
102 lines
3.0 KiB
Diff
|
Index: haproxy-2.6/examples/content-sw-sample.cfg
|
||
|
===================================================================
|
||
|
--- haproxy-2.6.orig/examples/content-sw-sample.cfg
|
||
|
+++ haproxy-2.6/examples/content-sw-sample.cfg
|
||
|
@@ -11,9 +11,9 @@ global
|
||
|
maxconn 10000
|
||
|
stats socket /var/run/haproxy.stat mode 600 level admin
|
||
|
log 127.0.0.1 local0
|
||
|
- uid 200
|
||
|
- gid 200
|
||
|
- chroot /var/empty
|
||
|
+ user haproxy
|
||
|
+ group haproxy
|
||
|
+ chroot /var/lib/haproxy
|
||
|
daemon
|
||
|
|
||
|
# The public 'www' address in the DMZ
|
||
|
Index: haproxy-2.6/examples/option-http_proxy.cfg
|
||
|
===================================================================
|
||
|
--- haproxy-2.6.orig/examples/option-http_proxy.cfg
|
||
|
+++ haproxy-2.6/examples/option-http_proxy.cfg
|
||
|
@@ -9,6 +9,9 @@ global
|
||
|
uid 200
|
||
|
gid 200
|
||
|
chroot /var/empty
|
||
|
+ chroot /var/lib/haproxy
|
||
|
+ user haproxy
|
||
|
+ group haproxy
|
||
|
daemon
|
||
|
|
||
|
frontend test-proxy
|
||
|
Index: haproxy-2.6/examples/transparent_proxy.cfg
|
||
|
===================================================================
|
||
|
--- haproxy-2.6.orig/examples/transparent_proxy.cfg
|
||
|
+++ haproxy-2.6/examples/transparent_proxy.cfg
|
||
|
@@ -6,6 +6,10 @@
|
||
|
#
|
||
|
|
||
|
global
|
||
|
+ chroot /var/lib/haproxy
|
||
|
+ user haproxy
|
||
|
+ group haproxy
|
||
|
+
|
||
|
defaults
|
||
|
timeout client 30s
|
||
|
timeout server 30s
|
||
|
Index: haproxy-2.6/examples/basic-config-edge.cfg
|
||
|
===================================================================
|
||
|
--- haproxy-2.6.orig/examples/basic-config-edge.cfg
|
||
|
+++ haproxy-2.6/examples/basic-config-edge.cfg
|
||
|
@@ -15,7 +15,7 @@ global
|
||
|
zero-warning
|
||
|
|
||
|
# Security hardening: isolate and drop privileges
|
||
|
- chroot /var/empty
|
||
|
+ chroot /var/lib/haproxy
|
||
|
user haproxy
|
||
|
group haproxy
|
||
|
|
||
|
Index: haproxy-2.6/examples/quick-test.cfg
|
||
|
===================================================================
|
||
|
--- haproxy-2.6.orig/examples/quick-test.cfg
|
||
|
+++ haproxy-2.6/examples/quick-test.cfg
|
||
|
@@ -3,6 +3,9 @@
|
||
|
|
||
|
global
|
||
|
strict-limits # refuse to start if insufficient FDs/memory
|
||
|
+ user haproxy
|
||
|
+ group haproxy
|
||
|
+ chroot /var/lib/haproxy
|
||
|
# add some process-wide tuning here if required
|
||
|
|
||
|
# A stats socket may be added to check live metrics if the load generators
|
||
|
Index: haproxy-2.6/examples/socks4.cfg
|
||
|
===================================================================
|
||
|
--- haproxy-2.6.orig/examples/socks4.cfg
|
||
|
+++ haproxy-2.6/examples/socks4.cfg
|
||
|
@@ -2,6 +2,9 @@ global
|
||
|
log /dev/log local0
|
||
|
log /dev/log local1 notice
|
||
|
stats timeout 30s
|
||
|
+ user haproxy
|
||
|
+ group haproxy
|
||
|
+ chroot /var/lib/haproxy
|
||
|
|
||
|
defaults
|
||
|
log global
|
||
|
Index: haproxy-2.6/examples/wurfl-example.cfg
|
||
|
===================================================================
|
||
|
--- haproxy-2.6.orig/examples/wurfl-example.cfg
|
||
|
+++ haproxy-2.6/examples/wurfl-example.cfg
|
||
|
@@ -5,6 +5,9 @@
|
||
|
#
|
||
|
|
||
|
global
|
||
|
+ user haproxy
|
||
|
+ group haproxy
|
||
|
+ chroot /var/lib/haproxy
|
||
|
|
||
|
# The WURFL data file
|
||
|
wurfl-data-file /usr/share/wurfl/wurfl.zip
|