clearlinux/uwsgi
2
0
Fork 0
mirror of https://github.com/clearlinux/uwsgi.git synced 2026-09-07 06:06:08 +00:00
Code Issues Packages Projects Releases Wiki Activity

added --privileged-binary-patch and --unprivileged-binary-patch, useful for running non-uwsgi apps using the Emperor

Browse Source
This commit is contained in:
roberto@quantal64
2012-07-16 11:55:40 +02:00
parent 667b418e28
commit c195e7e8ea
3 changed files with 22 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
core/utils.c
+8
View File
@@ -729,6 +729,14 @@ void uwsgi_as_root() {
}
usl = usl->next;
}
// we could now patch the binary
if (uwsgi.unprivileged_binary_patch) {
uwsgi.argv[0] = uwsgi.unprivileged_binary_patch;
execvp(uwsgi.unprivileged_binary_patch, uwsgi.argv);
uwsgi_error("execvp()");
exit(1);
}
}
else {
if (uwsgi.chroot && !uwsgi.is_a_reload) {
core/uwsgi.c
+11
View File
@@ -318,6 +318,8 @@ static struct uwsgi_option uwsgi_base_options[] = {
{"check-interval", required_argument, 0, "set the interval (in seconds) of master checks", uwsgi_opt_set_dyn, (void *) UWSGI_OPTION_MASTER_INTERVAL, 0},
{"forkbomb-delay", required_argument, 0, "sleep for the specified number of seconds when a forkbomb is detected", uwsgi_opt_set_int, &uwsgi.forkbomb_delay, UWSGI_OPT_MASTER},
{"binary-path", required_argument, 0, "force binary path", uwsgi_opt_set_str, &uwsgi.binary_path, 0},
{"privileged-binary-patch", required_argument, 0, "patch the uwsgi binary with a new command (before privileges drop)", uwsgi_opt_set_str, &uwsgi.privileged_binary_patch, 0},
{"unprivileged-binary-patch", required_argument, 0, "patch the uwsgi binary with a new command (after privileges drop)", uwsgi_opt_set_str, &uwsgi.unprivileged_binary_patch, 0},
#ifdef UWSGI_ASYNC
{"async", required_argument, 0, "enable async mode with specified cores", uwsgi_opt_set_int, &uwsgi.async, 0},
#endif
@@ -2010,6 +2012,15 @@ int main(int argc, char *argv[], char *envp[]) {
usl = usl->next;
}
// we could now patch the binary
if (uwsgi.privileged_binary_patch) {
uwsgi.argv[0] = uwsgi.privileged_binary_patch;
execvp(uwsgi.privileged_binary_patch, uwsgi.argv);
uwsgi_error("execvp()");
exit(1);
}
// call jail systems
for (i = 0; i < uwsgi.gp_cnt; i++) {
uwsgi.h
+3
View File
@@ -1349,6 +1349,9 @@ struct uwsgi_server {
struct uwsgi_string_list *exec_as_user_atexit;
struct uwsgi_string_list *exec_pre_app;
char *privileged_binary_patch;
char *unprivileged_binary_patch;
struct uwsgi_logger *loggers;
struct uwsgi_logger *choosen_logger;
char *requested_logger;