From mboxrd@z Thu Jan  1 00:00:00 1970
From: Wolfgang Apolinarski <wolfgang@apolinarski.de>
To: development@lists.ipfire.org
Subject: Re: [PATCH v2 2/2] Update to apache 2.4.25 
Date: Thu, 18 May 2017 21:28:43 +0200
Message-ID: <001301d2d00c$f65a6570$e30f3050$@apolinarski.de>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============9213664698917854913=="
List-Id: <development.lists.ipfire.org>

--===============9213664698917854913==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Hi!

> this looks good and I think it is ready to be merged unless anybody
> else has any objections.
>=20
> I do have one question tho: Do we need to enable all these new modules
> there? The point is that fewer modules would give us less attack
> surface.
>=20

The modules added by me are:
> > +LoadModule socache_shmcb_module /usr/lib/apache/mod_socache_shmcb.so
This module is a memory-based cache provider for the SSLSessionCache.

> > +LoadModule unixd_module /usr/lib/apache/mod_unixd.so
This module is needed, because of the Group and User directive that change th=
e user/group of Apache after startup (in uid.conf).

> > +LoadModule authn_core_module /usr/lib/apache/mod_authn_core.so
This module provides common authentication methods (AuthType, AuthName).

> > +LoadModule authz_core_module /usr/lib/apache/mod_authz_core.so
This module provides the Require-directive.

>>From the existing modules, it is possible to deactivate:
auth_digest_module - I never saw anyone using digest authentication (basic is=
 the one that is commonly chosen)
autoindex_module - Since we are not using the fancy indexing features of apac=
he

Do we actually need the php5 module? ;-)
The web interface does not need it, but apparently a lot of packages need it.=
..

Additionally, cgi was substituted with cgid.

Best regards,
Wolfgang


--===============9213664698917854913==--