OpenMetrics for ccache

The ccache software maintains a cache to store compilation artefacts, so the next time you compile the same source file, you can get the compiled code from the cache. That speeds up a lot recompilation. At Nasqueron, ccache is useful to speed up Poudriere builds to test FreeBSD ports. To be able to follow if […]

Read more

Find TCL headers and libraries in Debian and FreeBSD

Problem. You want to compile a software against TCL. You run ./configure, but it can’t find it. You so need to locate where are the headers and the libraries. Solution. Start with the TCL version. On Debian: headers are in a subdirectory in /usr/include, named tcl followed by the version libraries are sorted by architecture, […]

Read more

FreeBSD port update: devel/git-review

The devel/git-review port has been updated to the latest version. Changelog for git-review 1.23 Fix str(None) bug in port detection for hook setup Fix pep8 deps for pyflakes version conflict. Expand multiple commit submission warning. Changelog for git-review 1.22 Provide usage help even if not in Git directory Document defaultremote option & site/user configs Allow […]

Read more

How to use TclSOAP 1.6.7 in 2013

TclSOAP is a library to create or consume SOAP WebServices. It also allows to consume XML-RPC stuff. Unfortunately, strange versionning choices (it search precises versions of the dom TCL package, and of course, these versions bumped with the years) broke the package require mechanism. This patch solves that and allows you to use it:

[…]

Read more

Valspeak

The valspeak is a variant of American English spoken in California. Let me rewrite that correctly: The valspeak is ya know, like, a variant of American English, fer shure, spoken in California. In 1986, someone asks on the net.sources newsgroup the source of a small software to make this kind of conversion. To celebrate the […]

Read more

Apache 2 + PHP 5 / CGI + SuEXEC

Want a very secure Apache / PHP setup?

SuEXEC allows CGI execution under user own accounts and not webserver one. So, if a security hole is exploited through a script, that’s normally – if your FreeBSD server is correctly chmoded – gives access to resources.

The genuine SuEXEC drawback is you’ve to prefix each, as any other CGI script (remember #!/usr/bin/perl ?). We’ll slightly edit the SuEXEC.c code to avoid that.

SuEXEC will force you to chmod correctly and securely your web content: 700 the scripts, 711 the directories (755 to allow list them). If that’s sounds too paranoid or you’re tired of your users’ complaints, you can ask SuEXEC to ignore permissions check (but what’s the interest of this method in this case? You should consider chroot instead.). If you’re a console guru, I’ve coded an autochmod script to make our life paranoid but easier 😉

Read more