Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
branch: master
Commits on Apr 16, 2015
  1. @mbgrydeland

    Do not use VNUM() in varnishncsa

    mbgrydeland authored
    The strings in varnishncsa are not necessarily null-terminated, but
    having a start and an end pointer. The VNUM() thus fails when not
    seeing the end of string null character, causing parsing failures.
  2. @slimhazard

    restore the preference of /dev/urandom before /dev/random, because

    slimhazard authored
    /dev/random was causing varnishtest to block and time out
  3. @bsdphk
  4. @bsdphk
  5. @bsdphk

    Duh!

    bsdphk authored
  6. @bsdphk
  7. @bsdphk
  8. @bsdphk

    Harmless off by one

    bsdphk authored
    Spotted by: Coverity
Commits on Apr 15, 2015
  1. @fgsch

    call and return are not functions but keywords

    fgsch authored
    Remove them from the function list. They are mentioned somewhere else in
    this document.  Prompted after dridi@ spotted the invalid syntax in call.
  2. @fgsch

    varnishstat -f takes a single field

    fgsch authored
    To specify multiple fields you can use more than one -f.
  3. @bsdphk

    Adopt Dridi's suggestion to call the worker process uid "vcache".

    bsdphk authored
    Also look for it automatically.
  4. @bsdphk

    Implment Doc "The American" Wilco's suggestion and restrict

    bsdphk authored
    shared memory access to require root or varnish group membership.
  5. @bsdphk

    Nitpicking for FlexeLint

    bsdphk authored
  6. @bsdphk

    Prefer /dev/random over /dev/urandom.

    bsdphk authored
    Close the connection if authentication fails.
    
    Syslog authentication failures.
    
    Use /dev/[u]random directly to create secret files.  Fail creation
    if none of them are available.
    
    Always use "varnishd" as syslog identity, but append "/" + up to seven
    leading alphanumeric chars from the -i(dent) argument if available.
  7. @bsdphk
  8. @nigoroll
Commits on Apr 14, 2015
  1. @bsdphk
  2. @bsdphk
  3. @bsdphk

    Introduce a "workuser" subargument to -junix, which makes it possible

    bsdphk authored
    to run the varnishd worker process as a different user than the VCC
    and CC subprocesses.
    
    It is mandatory that the workuser has the same login group as the user
    subparamter.
    
    Recommended values for packaging:
    
    	-junix,user=varnish	"varnish" user has login group "varnish"
    	-junix,workuser=vrun	"vrun" user has login group "varnish"
  4. @nigoroll
  5. @nigoroll
  6. @nigoroll
  7. @bsdphk

    Run CC in a writable directory.

    bsdphk authored
    Don't assert that we can remove VCL directories, compilers may have
    left crumbs there, for instance gcov profiling info.
  8. @bsdphk

    Complain if no -a arguments.

    bsdphk authored
    Also open argv-supplied secret files with elevated privs.
  9. @bsdphk

    Used raised jail privs for file operations, and leave the -n dir

    bsdphk authored
    owned by the initial uid/gid of the varnishd process.
  10. @bsdphk
Commits on Apr 13, 2015
  1. @bsdphk
  2. @bsdphk
  3. @lkarsten
  4. @bsdphk

    Polish

    bsdphk authored
  5. @bsdphk
  6. @bsdphk

    Raise jail privs around initial socket opening.

    bsdphk authored
    Fixes #1699
Commits on Apr 10, 2015
  1. @fgsch

    Remove unnecessary check

    fgsch authored
  2. @fgsch

    Indent

    fgsch authored
  3. @mbgrydeland
Something went wrong with that request. Please try again.