Commit Graph

80 Commits

Author SHA1 Message Date
Omar Polo 837156014c add a disclaimer 2022-12-02 15:37:49 +00:00
Omar Polo d29a2ee224 get rid of the CGI support
I really want to get rid of the `executor' process hack for CGI scripts
and its escalation to allow fastcgi and proxying to work on non-OpenBSD.

This drops the CGI support and the `executor' process entirely and is
the first step towards gmid 2.0.  It also allows to have more secure
defaults.

On non-OpenBSD systems this means that the sandbox will be deactivated
as soon as fastcgi or proxying are used: you can't open sockets under
FreeBSD' capsicum(4) and I don't want to go thru the pain of making it
work under linux' seccomp/landlock.  Patches are always welcome however.

For folks using CGI scripts (hey, I'm one of you!) not all hope is lost:
fcgiwrap or OpenBSD' slowcgi(8) are ways to run CGI scripts as they were
FastCGI applications.

fixes for the documentation and to the non-OpenBSD sandboxes will
follow.
2022-09-06 16:11:09 +00:00
Omar Polo 456a4c6b6e add a "contributing" section 2022-03-29 12:25:18 +00:00
Omar Polo 4252e62cad "a posix libc" can be left implicit 2022-03-29 12:13:25 +00:00
Omar Polo a68203f089 remove docker section; it's already showed off in the contrib page 2022-03-29 12:05:29 +00:00
Omar Polo ed78e81b9c remove paragraph "locally installed libressl" + some tweaks
libtls is now widely available, it's at least on gentoo, arch, void,
alpine, fedora and debian sid; there's no need to show how to compile to
a locally installed one.
2022-02-18 09:09:23 +00:00
Omar Polo c3eb759a79 mention the reverse proxying 2021-12-29 20:53:22 +00:00
Omar Polo dcfdb969a2 don't list the exact pledge promises
It's easy to forgot to update the README after a code change (already
happened in the past) and they're easy to discover by reading
sandbox.c
2021-10-24 16:52:39 +00:00
Omar Polo 67c49bc5c7 mention landlock in the README 2021-09-19 17:08:12 +00:00
Anna “CyberTailor” e58a447a28 gmid.1: document logging 2021-07-29 09:31:09 +02:00
Omar Polo dbbfd0fb9f point to contrib.html 2021-07-11 20:58:57 +00:00
Omar Polo be52e954c1 sync readme.md with sandbox.c 2021-07-09 08:11:57 +00:00
Omar Polo 3759d3eb56 show macro usage in the example 2021-07-06 11:41:24 +00:00
Omar Polo 74f0778b9a drop the dependency on lex by implementing yylex by ourselves
The actual implementation is based off doas' parse.y.  This gave us
various benefits, like cleaner code, \ to break long lines, better
handling of quotes etc...
2021-06-16 14:43:16 +00:00
Omar Polo a6c809551e mention FastCGI in the README.md 2021-06-11 16:11:58 +00:00
Omar Polo 6957a8c27f reword last sentence 2021-06-04 07:14:50 +00:00
Omar Polo 0c7a1d3cf3 improve docker example 2021-06-04 07:13:37 +00:00
Omar Polo 17a04409b5 typo in docker example 2021-04-29 19:52:50 +00:00
Omar Polo 8070ffa70f typo (again) 2021-04-29 19:50:25 +00:00
Omar Polo 7a4f742657 typo 2021-04-29 19:48:47 +00:00
Omar Polo 08ce6f5273 tweaked the readme a bit 2021-04-29 19:46:51 +00:00
Omar Polo c79b63f580 typo 2021-04-27 07:14:00 +00:00
Omar Polo bb4be662f1 specify the develop process 2021-04-25 12:01:34 +00:00
Omar Polo 2ddc927113 mention the `static' target 2021-03-29 10:13:17 +00:00
Omar Polo 94be0bf03b update README 2021-03-20 11:08:17 +00:00
Omar Polo 290b5baa97 updated readme 2021-02-23 13:22:29 +00:00
Omar Polo 1606927ea1 add -levent in the example 2021-02-11 09:12:10 +00:00
Omar Polo 747b35d0da align 2021-02-08 18:54:34 +00:00
Omar Polo b9231167fb mention libevent 2021-02-08 18:47:36 +00:00
Omar Polo 1487e11eda drop sample.conf and add something to the README.md 2021-02-06 19:05:40 +00:00
Omar Polo 86edc4f400 mention configuration reload 2021-02-04 13:34:43 +00:00
Omar Polo 601bc1cc37 readme updates 2021-01-30 11:49:48 +00:00
Omar Polo 22a742e4cb typo 2021-01-29 17:07:26 +00:00
Omar Polo 747f13af33 add certificate generation in features list 2021-01-27 16:59:54 +00:00
Omar Polo 286c4f40a5 readme tweaks
fix features list and talk about I18N
2021-01-27 14:42:40 +00:00
Omar Polo 42650adec0 sync deps and sandbox info 2021-01-27 10:52:37 +00:00
Omar Polo 909ea500a4 typo 2021-01-27 10:52:11 +00:00
Omar Polo 6c117838be fix docker example 2021-01-25 14:55:03 +00:00
Omar Polo 0a0e6ba7f9 typo 2021-01-25 14:52:57 +00:00
Omar Polo 2f09adb085 readme addition 2021-01-25 14:52:19 +00:00
Omar Polo 0b00962d37 mention chroot 2021-01-25 10:36:21 +00:00
Omar Polo 31a4993a94 use gg instead of gg.py for the regression suite 2021-01-23 17:10:00 +00:00
Omar Polo 45b4aa6e57 fix local libretls example 2021-01-23 12:22:09 +00:00
Omar Polo 7f740a1440 typo 2021-01-22 17:54:37 +00:00
Omar Polo dd8cc7d3ce mention testing in readme 2021-01-22 17:28:39 +00:00
Omar Polo f980545b58 typo x 2 2021-01-21 13:16:14 +00:00
Omar Polo 04397b3293 typo 2021-01-21 13:14:55 +00:00
Omar Polo 8f0da58068 mention the configure script and how to link to a local libtls 2021-01-21 13:12:35 +00:00
Omar Polo 32befb74a9 drop mention to the static target
it works on OpenBSD but not on alpine, it requires further tweaks.
2021-01-21 09:19:13 +00:00
Omar Polo 15209ad9ed typo 2021-01-21 08:51:17 +00:00