diff options
| author | gaykitty <126119280+gaykitty@users.noreply.github.com> | 2024-03-10 15:08:11 -0400 |
|---|---|---|
| committer | gaykitty <126119280+gaykitty@users.noreply.github.com> | 2024-08-17 18:32:48 -0400 |
| commit | 77430d388d03dea21c65813b4c48a346a9c7b79f (patch) | |
| tree | 2f92eb4ba690fa00bd739e3bcec4ad54000d69f2 /pkgs/development/python-modules/python-mapnik/python-mapnik_std_optional.patch | |
| parent | c3aa7b8938b17aebd2deecf7be0636000d62a2b9 (diff) | |
nixos/stargazer: add allowCgiUser to make cgi-user option work
Previously the cgi-user option in stargazer was broken in this module
because stargazer didn't have CAP_SETUID and CAP_SETGID. cgi-user tells
stargazer to run cgi processes as a different user. I added an option
allowCgiUser that give stargazer these capabilities when enabled. I made
this an option because access to those syscalls greatly increases the
damage a RCE bug in stargazer could do. So they should only be enabled
if needed.
Diffstat (limited to 'pkgs/development/python-modules/python-mapnik/python-mapnik_std_optional.patch')
0 files changed, 0 insertions, 0 deletions