Apache::ASP patches for 'httponly' & 'remote_ip'

Octopussy-Project · Apr 12, 2017 · 287342b · 287342b
1 parent 512cab1
commit 287342b
Show file tree

Hide file tree

Showing 3 changed files with 16 additions and 2 deletions.
diff --git a/LINUX/INSTALL.sh b/LINUX/INSTALL.sh
@@ -123,9 +123,12 @@ $MKDIR /var/lib/$OCTO/rrd_png/
 $CHOWN /var/lib/$OCTO/rrd_png/
 $LN /var/lib/$OCTO/rrd_png/ /usr/share/$OCTO/rrd 
 
-# Patch Apache::ASP::StateManager for HttpOnly cookie flag
+# Patch Apache::ASP::StateManager for: 
+# - HttpOnly cookie flag
+# - Apache 2.4 remote_ip
 file_to_patch=$( find / -name StateManager.pm | grep "Apache/ASP" )
-patch $file_to_patch < LINUX/apache-asp-statemanager.patch
+patch $file_to_patch < LINUX/apache-asp-statemanager_httponly.patch
+patch $file_to_patch < LINUX/apache-asp-statemanager_remote_ip.patch
 
 #
 # Octopussy FIFO creation (for Rsyslog)

diff --git a/LINUX/apache-asp-statemanager.patch → LINUX/apache-asp-statemanager_httponly.patch b/LINUX/apache-asp-statemanager.patch → LINUX/apache-asp-statemanager_httponly.patch
diff --git a/LINUX/apache-asp-statemanager_remote_ip.patch b/LINUX/apache-asp-statemanager_remote_ip.patch
@@ -0,0 +1,11 @@
+--- /usr/share/perl5/Apache/ASP/StateManager.pm	2016-11-14 22:47:59.812733840 +0000
++++ /usr/share/perl5/Apache/ASP/StateManager.pm.new	2016-11-14 22:47:33.561000465 +0000
+@@ -82,7 +82,7 @@
+ 	$self->{cookie_path}       = &config($self, 'CookiePath', undef, '/');
+ 	$self->{cookie_domain}     = &config($self, 'CookieDomain');
+ 	$self->{paranoid_session}  = &config($self, 'ParanoidSession');
+-	$self->{remote_ip}         = $r->connection()->remote_ip();
++	$self->{remote_ip}         = (defined $r->useragent_ip() ? $r->useragent_ip() : $r->connection()->remote_ip());
+ 	$self->{session_count}     = &config($self, 'SessionCount');
+
+ 	# cookieless session support, cascading values