smeserver/smeserver-apache
6
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

* Fri Dec 27 2024 Jean-Philippe Pialasse <jpp@koozali.org> 11.0.0-9.sme

Browse Source 
- add X-Content-Type-Options nosniff [SME: 12835]
- add Strict Transport Security support HSTS [SME: 12815]
- add X-Frame-Options SAMEORIGIN Header to prevent clickjacking [SME: 12816]
- add referrer-Policy same-origin [SME: 12817]
- add OCSP Stapling support [SME: 12819]
- add CSP Content-Security-Policy support [SME: 9567]
- add .well-known and .well-known/security.txt [SME: 12818]
This commit is contained in:
Jean-Philippe Pialasse 2024-12-31 03:43:52 -05:00
parent 86a394d1aa
commit ab245eca09
8 changed files with 10 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
createlinks
View File

@ -6,7 +6,7 @@ use esmith::Build::CreateLinks qw(:all);
#-------------------------------------------------- #--------------------------------------------------
my $event = "smeserver-apache-update"; my $event = "smeserver-apache-update";
templates2events("/etc/httpd/conf/httpd.conf", $event); templates2events("/etc/httpd/conf/httpd.conf", $event);
templates2events("/var/www/html/.well-known/acme-challenge/security.txt", $event); templates2events("/var/www/html/.well-known/security.txt", $event);
safe_symlink("restart", "root/etc/e-smith/events/$event/services2adjust/httpd-e-smith"); safe_symlink("restart", "root/etc/e-smith/events/$event/services2adjust/httpd-e-smith");
event_link("systemd-reload", $event, "89"); event_link("systemd-reload", $event, "89");
event_link("systemd-default", $event, "88"); event_link("systemd-default", $event, "88");
@ -17,7 +17,7 @@ templates2events("/etc/logrotate.d/httpd", $event);
#-------------------------------------------------- #--------------------------------------------------
my $event = "console-save"; my $event = "console-save";
templates2events("/var/www/html/.well-known/acme-challenge/security.txt", $event); templates2events("/var/www/html/.well-known/security.txt", $event);
templates2events("/etc/httpd/conf/httpd.conf", $event); templates2events("/etc/httpd/conf/httpd.conf", $event);
safe_symlink("restart", "root/etc/e-smith/events/$event/services2adjust/httpd-e-smith"); safe_symlink("restart", "root/etc/e-smith/events/$event/services2adjust/httpd-e-smith");
@ -145,7 +145,7 @@ safe_symlink("reload", "root/etc/e-smith/events/$event/services2adjust/httpd-e-s
$event = "remoteaccess-update"; $event = "remoteaccess-update";
templates2events("/var/www/html/.well-known/acme-challenge/security.txt", $event); templates2events("/var/www/html/.well-known/security.txt", $event);
templates2events("/etc/httpd/conf/httpd.conf", $event); templates2events("/etc/httpd/conf/httpd.conf", $event);
safe_symlink("reload", "root/etc/e-smith/events/$event/services2adjust/httpd-e-smith"); safe_symlink("reload", "root/etc/e-smith/events/$event/services2adjust/httpd-e-smith");
@ -155,7 +155,7 @@ safe_symlink("reload", "root/etc/e-smith/events/$event/services2adjust/httpd-e-s
$event = "email-update"; $event = "email-update";
templates2events("/var/www/html/.well-known/acme-challenge/security.txt", $event); templates2events("/var/www/html/.well-known/security.txt", $event);
templates2events("/etc/httpd/conf/httpd.conf", $event); templates2events("/etc/httpd/conf/httpd.conf", $event);
safe_symlink("reload", "root/etc/e-smith/events/$event/services2adjust/httpd-e-smith"); safe_symlink("reload", "root/etc/e-smith/events/$event/services2adjust/httpd-e-smith");
@ -165,7 +165,7 @@ safe_symlink("reload", "root/etc/e-smith/events/$event/services2adjust/httpd-e-s
$event = "logrotate"; $event = "logrotate";
templates2events("/var/www/html/.well-known/acme-challenge/security.txt", $event); templates2events("/var/www/html/.well-known/security.txt", $event);
safe_symlink("reload", "root/etc/e-smith/events/$event/services2adjust/httpd-e-smith"); safe_symlink("reload", "root/etc/e-smith/events/$event/services2adjust/httpd-e-smith");
#-------------------------------------------------- #--------------------------------------------------
@ -173,7 +173,7 @@ safe_symlink("reload", "root/etc/e-smith/events/$event/services2adjust/httpd-e-s
#-------------------------------------------------- #--------------------------------------------------
$event = "ssl-update"; $event = "ssl-update";
templates2events("/var/www/html/.well-known/acme-challenge/security.txt", $event); templates2events("/var/www/html/.well-known/security.txt", $event);
templates2events("/etc/httpd/conf/httpd.conf", $event); templates2events("/etc/httpd/conf/httpd.conf", $event);
safe_symlink("reload", "root/etc/e-smith/events/$event/services2adjust/httpd-e-smith"); safe_symlink("reload", "root/etc/e-smith/events/$event/services2adjust/httpd-e-smith");
@ -182,7 +182,7 @@ safe_symlink("reload", "root/etc/e-smith/events/$event/services2adjust/httpd-e-s
#-------------------------------------------------- #--------------------------------------------------
$event = "post-install"; $event = "post-install";
templates2events("/var/www/html/.well-known/acme-challenge/security.txt", $event); templates2events("/var/www/html/.well-known/security.txt", $event);
templates2events("/etc/logrotate.d/httpd", $event); templates2events("/etc/logrotate.d/httpd", $event);
#-------------------------------------------------- #--------------------------------------------------
@ -190,6 +190,6 @@ templates2events("/etc/logrotate.d/httpd", $event);
#-------------------------------------------------- #--------------------------------------------------
$event = "post-upgrade"; $event = "post-upgrade";
templates2events("/var/www/html/.well-known/acme-challenge/security.txt", $event); templates2events("/var/www/html/.well-known/security.txt", $event);
templates2events("/etc/logrotate.d/httpd", $event); templates2events("/etc/logrotate.d/httpd", $event);

0
root/etc/e-smith/templates.metadata/var/www/html/.well-known/acme-challenge/security.txt → root/etc/e-smith/templates.metadata/var/www/html/.well-known/security.txt
View File

0
root/etc/e-smith/templates/var/www/html/.well-known/acme-challenge/security.txt/10contact → root/etc/e-smith/templates/var/www/html/.well-known/security.txt/10contact
View File

0
root/etc/e-smith/templates/var/www/html/.well-known/acme-challenge/security.txt/20encryption → root/etc/e-smith/templates/var/www/html/.well-known/security.txt/20encryption
View File

0
root/etc/e-smith/templates/var/www/html/.well-known/acme-challenge/security.txt/30expires → root/etc/e-smith/templates/var/www/html/.well-known/security.txt/30expires
View File

0
root/etc/e-smith/templates/var/www/html/.well-known/acme-challenge/security.txt/40language → root/etc/e-smith/templates/var/www/html/.well-known/security.txt/40language
View File

0
root/etc/e-smith/templates/var/www/html/.well-known/acme-challenge/security.txt/template-begin → root/etc/e-smith/templates/var/www/html/.well-known/security.txt/template-begin
View File

4
smeserver-apache.spec
View File

@ -4,7 +4,7 @@ Summary: smeserver server and gateway - apache module
%define name smeserver-apache %define name smeserver-apache
Name: %{name} Name: %{name}
%define version 11.0.0 %define version 11.0.0
%define release 8 %define release 9
Version: %{version} Version: %{version}
Release: %{release}%{?dist} Release: %{release}%{?dist}
License: GPL License: GPL
@ -74,7 +74,7 @@ if [ $1 -gt 1 ] ; then
fi fi
%changelog %changelog
* Fri Dec 27 2024 Jean-Philippe Pialasse <jpp@koozali.org> 11.0.0-8.sme * Fri Dec 27 2024 Jean-Philippe Pialasse <jpp@koozali.org> 11.0.0-9.sme
- add X-Content-Type-Options nosniff [SME: 12835] - add X-Content-Type-Options nosniff [SME: 12835]
- add Strict Transport Security support HSTS [SME: 12815] - add Strict Transport Security support HSTS [SME: 12815]
- add X-Frame-Options SAMEORIGIN Header to prevent clickjacking [SME: 12816] - add X-Frame-Options SAMEORIGIN Header to prevent clickjacking [SME: 12816]