diff --git a/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/86PhpsysinfoAlias b/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/86PhpsysinfoAlias index f32da1c..1ca4c88 100644 --- a/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/86PhpsysinfoAlias +++ b/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/86PhpsysinfoAlias @@ -4,10 +4,12 @@ Alias /phpsysinfo /opt/phpsysinfo SSLRequireSSL Options -Indexes - #AuthName "phpSysInfo" - #AuthBasicProvider external - #AuthType Basic - #AuthExternal pwauth + AuthName "phpSysInfo" + AuthBasicProvider external + AuthType Basic + AuthExternal pwauth + + Header set Content-Security-Policy "script-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' " Require {(($phpmyadmin{access} || 'private' ) eq "public" ) ? "all granted": "ip $localAccess $externalSSLAccess";} @@ -18,4 +20,4 @@ Alias /phpsysinfo /opt/phpsysinfo SetHandler "proxy:unix:/var/run/php-fpm/php.sock|fcgi://localhost" - \ No newline at end of file + diff --git a/root/usr/share/smanager/lib/SrvMngr/Controller/Phpsysinfo.pm b/root/usr/share/smanager/lib/SrvMngr/Controller/Phpsysinfo.pm index 0d9c280..823a8d2 100644 --- a/root/usr/share/smanager/lib/SrvMngr/Controller/Phpsysinfo.pm +++ b/root/usr/share/smanager/lib/SrvMngr/Controller/Phpsysinfo.pm @@ -47,4 +47,4 @@ sub main { # $c->proxy_to('https://sme11.thereadclan.me.uk/phpsysinfo/index.php?disp=static'); #} -1; \ No newline at end of file +1; diff --git a/smeserver-phpsysinfo.spec b/smeserver-phpsysinfo.spec index f0ea5e5..3c5574e 100644 --- a/smeserver-phpsysinfo.spec +++ b/smeserver-phpsysinfo.spec @@ -6,7 +6,7 @@ Summary: phpSysInfo for SME Server %define name smeserver-phpsysinfo Name: %{name} %define version 11.0.0 -%define release 2 +%define release 3 Version: %{version} Release: %{release}%{?dist} License: GPL @@ -27,9 +27,15 @@ AutoReqProv: no Access with admin login credentials via https://yourdomain/phpsysinfo %changelog -* Sat Sep 27 2025 Brian Read 11.0.0-2.sme +* Sat Sep 27 2025 Brian Read 11.0.0-3.sme - Add css to make embedded static version look a bit better [SME: 13195] +* Thu Sep 25 2025 Jean-Philippe Pialasse 11.0.0-2.sme +- CSP relaxed policy +- revert authentication +- httpd syntax fix +- smanager improvement + * Mon May 12 2025 Brian Read 11.0.0-1.sme - Adding SM2 panel [SME: 13004] - Upgrade to phpsysinfo 3.4.4