Marcus Rueckert
1b9d0c4fc0
https://www.mail-archive.com/haproxy@formilux.org/msg42371.html - refreshed patches - haproxy-1.6.0-makefile_lib.patch - haproxy-1.6.0-sec-options.patch - haproxy-1.6.0_config_haproxy_user.patch - lua54.patch OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=265
102 lines
3.0 KiB
Diff
102 lines
3.0 KiB
Diff
Index: haproxy-2.6/examples/content-sw-sample.cfg
|
|
===================================================================
|
|
--- haproxy-2.6.orig/examples/content-sw-sample.cfg
|
|
+++ haproxy-2.6/examples/content-sw-sample.cfg
|
|
@@ -11,9 +11,9 @@ global
|
|
maxconn 10000
|
|
stats socket /var/run/haproxy.stat mode 600 level admin
|
|
log 127.0.0.1 local0
|
|
- uid 200
|
|
- gid 200
|
|
- chroot /var/empty
|
|
+ user haproxy
|
|
+ group haproxy
|
|
+ chroot /var/lib/haproxy
|
|
daemon
|
|
|
|
# The public 'www' address in the DMZ
|
|
Index: haproxy-2.6/examples/option-http_proxy.cfg
|
|
===================================================================
|
|
--- haproxy-2.6.orig/examples/option-http_proxy.cfg
|
|
+++ haproxy-2.6/examples/option-http_proxy.cfg
|
|
@@ -9,6 +9,9 @@ global
|
|
uid 200
|
|
gid 200
|
|
chroot /var/empty
|
|
+ chroot /var/lib/haproxy
|
|
+ user haproxy
|
|
+ group haproxy
|
|
daemon
|
|
|
|
frontend test-proxy
|
|
Index: haproxy-2.6/examples/transparent_proxy.cfg
|
|
===================================================================
|
|
--- haproxy-2.6.orig/examples/transparent_proxy.cfg
|
|
+++ haproxy-2.6/examples/transparent_proxy.cfg
|
|
@@ -6,6 +6,10 @@
|
|
#
|
|
|
|
global
|
|
+ chroot /var/lib/haproxy
|
|
+ user haproxy
|
|
+ group haproxy
|
|
+
|
|
defaults
|
|
timeout client 30s
|
|
timeout server 30s
|
|
Index: haproxy-2.6/examples/basic-config-edge.cfg
|
|
===================================================================
|
|
--- haproxy-2.6.orig/examples/basic-config-edge.cfg
|
|
+++ haproxy-2.6/examples/basic-config-edge.cfg
|
|
@@ -15,7 +15,7 @@ global
|
|
zero-warning
|
|
|
|
# Security hardening: isolate and drop privileges
|
|
- chroot /var/empty
|
|
+ chroot /var/lib/haproxy
|
|
user haproxy
|
|
group haproxy
|
|
|
|
Index: haproxy-2.6/examples/quick-test.cfg
|
|
===================================================================
|
|
--- haproxy-2.6.orig/examples/quick-test.cfg
|
|
+++ haproxy-2.6/examples/quick-test.cfg
|
|
@@ -3,6 +3,9 @@
|
|
|
|
global
|
|
strict-limits # refuse to start if insufficient FDs/memory
|
|
+ user haproxy
|
|
+ group haproxy
|
|
+ chroot /var/lib/haproxy
|
|
# add some process-wide tuning here if required
|
|
|
|
# A stats socket may be added to check live metrics if the load generators
|
|
Index: haproxy-2.6/examples/socks4.cfg
|
|
===================================================================
|
|
--- haproxy-2.6.orig/examples/socks4.cfg
|
|
+++ haproxy-2.6/examples/socks4.cfg
|
|
@@ -2,6 +2,9 @@ global
|
|
log /dev/log local0
|
|
log /dev/log local1 notice
|
|
stats timeout 30s
|
|
+ user haproxy
|
|
+ group haproxy
|
|
+ chroot /var/lib/haproxy
|
|
|
|
defaults
|
|
log global
|
|
Index: haproxy-2.6/examples/wurfl-example.cfg
|
|
===================================================================
|
|
--- haproxy-2.6.orig/examples/wurfl-example.cfg
|
|
+++ haproxy-2.6/examples/wurfl-example.cfg
|
|
@@ -5,6 +5,9 @@
|
|
#
|
|
|
|
global
|
|
+ user haproxy
|
|
+ group haproxy
|
|
+ chroot /var/lib/haproxy
|
|
|
|
# The WURFL data file
|
|
wurfl-data-file /usr/share/wurfl/wurfl.zip
|