--- libapache-mod-removeip-1.0b.orig/debian/libapache2-mod-removeip.apache2 +++ libapache-mod-removeip-1.0b/debian/libapache2-mod-removeip.apache2 @@ -0,0 +1,3 @@ +mod apache2.0/.libs/mod_removeip.so +mod debian/removeip.load +mod debian/removeip.conf --- libapache-mod-removeip-1.0b.orig/debian/removeip.conf +++ libapache-mod-removeip-1.0b/debian/removeip.conf @@ -0,0 +1,3 @@ + +REMOVEIPenable On + --- libapache-mod-removeip-1.0b.orig/debian/removeip.load +++ libapache-mod-removeip-1.0b/debian/removeip.load @@ -0,0 +1 @@ +LoadModule removeip_module /usr/lib/apache2/modules/mod_removeip.so --- libapache-mod-removeip-1.0b.orig/debian/rules +++ libapache-mod-removeip-1.0b/debian/rules @@ -0,0 +1,48 @@ +#!/usr/bin/make -f +# debian rules file for mod_removeip + +include /usr/share/dpatch/dpatch.make + +build: patch-stamp + dh_testdir + + apxs2 -c apache2.0/mod_removeip.c + + +clean: unpatch + dh_testdir + dh_testroot + rm -f mod_removeip.o + cd apache2.0 && rm -rf .libs *.o *.lo *.la *.slo + dh_clean + +install: build + dh_testdir + dh_testroot + dh_clean -k + dh_installdirs + dh_install + dh_apache2 -e + +# Build architecture-dependent files here. +binary-arch: build install + dh_testdir + dh_testroot + dh_installdocs + dh_installexamples + dh_installchangelogs CHANGES + dh_link + dh_strip + dh_compress -Xexample + dh_fixperms + dh_installdeb + dh_shlibdeps + dh_gencontrol + dh_md5sums + dh_builddeb + +# Build architecture-independent files here. +binary-indep: build install + +binary: binary-arch binary-indep +.PHONY: build clean binary-indep binary-arch binary install configure --- libapache-mod-removeip-1.0b.orig/debian/libapache2-mod-removeip.dirs +++ libapache-mod-removeip-1.0b/debian/libapache2-mod-removeip.dirs @@ -0,0 +1 @@ +usr/lib/apache2/modules --- libapache-mod-removeip-1.0b.orig/debian/README.Debian +++ libapache-mod-removeip-1.0b/debian/README.Debian @@ -0,0 +1,32 @@ +## To activate mod_removeip, do: + + -- Apache 1.33 + +cp /usr/share/doc/libapache-mod-removeip/examples/mod_removeip.conf /etc/apache{-VERSION}/conf.d/ + +and restart apache + + -- Apache2 + +a2enmod removeip && /etc/init.d/apache2 force-reload + + +## Some details about mod_removeip and web apps/access restrictions: + +Most of all, it means that any IP address based access restriction or +other security measures based on diversity (and possibly +non-predictability) of IP addresses implemented on the web application +layer will no longer provide any security. This may allow for easier +circumvention of applications' security measures (which may include +additional authentication tokens besides IP addresses, such as session +IDs or login credentials). + +It should also be noted that applications which base some or all of +their functionality on an expected diversity of IP addresses, such as an +access log analyzer which provides statistics per IP address, will loose +some or all of their functionality. + +Fortunately, libapache2-mod-removeip does _not_ cause apache to grant +everyone access to access restricted areas based on "Allow/Deny from" +directives. As such, it does, for example, not change whom is able to +access http://some.host/server-status . --- libapache-mod-removeip-1.0b.orig/debian/copyright +++ libapache-mod-removeip-1.0b/debian/copyright @@ -0,0 +1,216 @@ +This package was debianized by Mod_removeip Packaging Group on +Fri, 21 Jul 2006 23:34:34 +0200. + +It was downloaded from http://www.cat.org.au/~andrew/ + +Copyright Holder: Andrew McNaughton + +License: Apache license + + +/* ==================================================================== + + Apache License + Version 2.0, January 2004 + http://www.apache.org/licenses/ + + TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION + + 1. Definitions. + + "License" shall mean the terms and conditions for use, reproduction, + and distribution as defined by Sections 1 through 9 of this document. + + "Licensor" shall mean the copyright owner or entity authorized by + the copyright owner that is granting the License. + + "Legal Entity" shall mean the union of the acting entity and all + other entities that control, are controlled by, or are under common + control with that entity. For the purposes of this definition, + "control" means (i) the power, direct or indirect, to cause the + direction or management of such entity, whether by contract or + otherwise, or (ii) ownership of fifty percent (50%) or more of the + outstanding shares, or (iii) beneficial ownership of such entity. + + "You" (or "Your") shall mean an individual or Legal Entity + exercising permissions granted by this License. + + "Source" form shall mean the preferred form for making modifications, + including but not limited to software source code, documentation + source, and configuration files. + + "Object" form shall mean any form resulting from mechanical + transformation or translation of a Source form, including but + not limited to compiled object code, generated documentation, + and conversions to other media types. + + "Work" shall mean the work of authorship, whether in Source or + Object form, made available under the License, as indicated by a + copyright notice that is included in or attached to the work + (an example is provided in the Appendix below). + + "Derivative Works" shall mean any work, whether in Source or Object + form, that is based on (or derived from) the Work and for which the + editorial revisions, annotations, elaborations, or other modifications + represent, as a whole, an original work of authorship. For the purposes + of this License, Derivative Works shall not include works that remain + separable from, or merely link (or bind by name) to the interfaces of, + the Work and Derivative Works thereof. + + "Contribution" shall mean any work of authorship, including + the original version of the Work and any modifications or additions + to that Work or Derivative Works thereof, that is intentionally + submitted to Licensor for inclusion in the Work by the copyright owner + or by an individual or Legal Entity authorized to submit on behalf of + the copyright owner. For the purposes of this definition, "submitted" + means any form of electronic, verbal, or written communication sent + to the Licensor or its representatives, including but not limited to + communication on electronic mailing lists, source code control systems, + and issue tracking systems that are managed by, or on behalf of, the + Licensor for the purpose of discussing and improving the Work, but + excluding communication that is conspicuously marked or otherwise + designated in writing by the copyright owner as "Not a Contribution." + + "Contributor" shall mean Licensor and any individual or Legal Entity + on behalf of whom a Contribution has been received by Licensor and + subsequently incorporated within the Work. + + 2. Grant of Copyright License. Subject to the terms and conditions of + this License, each Contributor hereby grants to You a perpetual, + worldwide, non-exclusive, no-charge, royalty-free, irrevocable + copyright license to reproduce, prepare Derivative Works of, + publicly display, publicly perform, sublicense, and distribute the + Work and such Derivative Works in Source or Object form. + + 3. Grant of Patent License. Subject to the terms and conditions of + this License, each Contributor hereby grants to You a perpetual, + worldwide, non-exclusive, no-charge, royalty-free, irrevocable + (except as stated in this section) patent license to make, have made, + use, offer to sell, sell, import, and otherwise transfer the Work, + where such license applies only to those patent claims licensable + by such Contributor that are necessarily infringed by their + Contribution(s) alone or by combination of their Contribution(s) + with the Work to which such Contribution(s) was submitted. If You + institute patent litigation against any entity (including a + cross-claim or counterclaim in a lawsuit) alleging that the Work + or a Contribution incorporated within the Work constitutes direct + or contributory patent infringement, then any patent licenses + granted to You under this License for that Work shall terminate + as of the date such litigation is filed. + + 4. Redistribution. You may reproduce and distribute copies of the + Work or Derivative Works thereof in any medium, with or without + modifications, and in Source or Object form, provided that You + meet the following conditions: + + (a) You must give any other recipients of the Work or + Derivative Works a copy of this License; and + + (b) You must cause any modified files to carry prominent notices + stating that You changed the files; and + + (c) You must retain, in the Source form of any Derivative Works + that You distribute, all copyright, patent, trademark, and + attribution notices from the Source form of the Work, + excluding those notices that do not pertain to any part of + the Derivative Works; and + + (d) If the Work includes a "NOTICE" text file as part of its + distribution, then any Derivative Works that You distribute must + include a readable copy of the attribution notices contained + within such NOTICE file, excluding those notices that do not + pertain to any part of the Derivative Works, in at least one + of the following places: within a NOTICE text file distributed + as part of the Derivative Works; within the Source form or + documentation, if provided along with the Derivative Works; or, + within a display generated by the Derivative Works, if and + wherever such third-party notices normally appear. The contents + of the NOTICE file are for informational purposes only and + do not modify the License. You may add Your own attribution + notices within Derivative Works that You distribute, alongside + or as an addendum to the NOTICE text from the Work, provided + that such additional attribution notices cannot be construed + as modifying the License. + + You may add Your own copyright statement to Your modifications and + may provide additional or different license terms and conditions + for use, reproduction, or distribution of Your modifications, or + for any such Derivative Works as a whole, provided Your use, + reproduction, and distribution of the Work otherwise complies with + the conditions stated in this License. + + 5. Submission of Contributions. Unless You explicitly state otherwise, + any Contribution intentionally submitted for inclusion in the Work + by You to the Licensor shall be under the terms and conditions of + this License, without any additional terms or conditions. + Notwithstanding the above, nothing herein shall supersede or modify + the terms of any separate license agreement you may have executed + with Licensor regarding such Contributions. + + 6. Trademarks. This License does not grant permission to use the trade + names, trademarks, service marks, or product names of the Licensor, + except as required for reasonable and customary use in describing the + origin of the Work and reproducing the content of the NOTICE file. + + 7. Disclaimer of Warranty. Unless required by applicable law or + agreed to in writing, Licensor provides the Work (and each + Contributor provides its Contributions) on an "AS IS" BASIS, + WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or + implied, including, without limitation, any warranties or conditions + of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A + PARTICULAR PURPOSE. You are solely responsible for determining the + appropriateness of using or redistributing the Work and assume any + risks associated with Your exercise of permissions under this License. + + 8. Limitation of Liability. In no event and under no legal theory, + whether in tort (including negligence), contract, or otherwise, + unless required by applicable law (such as deliberate and grossly + negligent acts) or agreed to in writing, shall any Contributor be + liable to You for damages, including any direct, indirect, special, + incidental, or consequential damages of any character arising as a + result of this License or out of the use or inability to use the + Work (including but not limited to damages for loss of goodwill, + work stoppage, computer failure or malfunction, or any and all + other commercial damages or losses), even if such Contributor + has been advised of the possibility of such damages. + + 9. Accepting Warranty or Additional Liability. While redistributing + the Work or Derivative Works thereof, You may choose to offer, + and charge a fee for, acceptance of support, warranty, indemnity, + or other liability obligations and/or rights consistent with this + License. However, in accepting such obligations, You may act only + on Your own behalf and on Your sole responsibility, not on behalf + of any other Contributor, and only if You agree to indemnify, + defend, and hold each Contributor harmless for any liability + incurred by, or claims asserted against, such Contributor by reason + of your accepting any such warranty or additional liability. + + END OF TERMS AND CONDITIONS + + APPENDIX: How to apply the Apache License to your work. + + To apply the Apache License to your work, attach the following + boilerplate notice, with the fields enclosed by brackets "[]" + replaced with your own identifying information. (Don't include + the brackets!) The text should be enclosed in the appropriate + comment syntax for the file format. We also recommend that a + file or class name and description of purpose be included on the + same "printed page" as the copyright notice for easier + identification within third-party archives. + + Copyright [yyyy] [name of copyright owner] + + Licensed under the Apache License, Version 2.0 (the "License"); + you may not use this file except in compliance with the License. + You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + + Unless required by applicable law or agreed to in writing, software + distributed under the License is distributed on an "AS IS" BASIS, + WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + See the License for the specific language governing permissions and + limitations under the License. + + * ==================================================================== + */ --- libapache-mod-removeip-1.0b.orig/debian/libapache2-mod-removeip.docs +++ libapache-mod-removeip-1.0b/debian/libapache2-mod-removeip.docs @@ -0,0 +1,2 @@ +README +debian/README.Debian --- libapache-mod-removeip-1.0b.orig/debian/compat +++ libapache-mod-removeip-1.0b/debian/compat @@ -0,0 +1 @@ +4 --- libapache-mod-removeip-1.0b.orig/debian/control +++ libapache-mod-removeip-1.0b/debian/control @@ -0,0 +1,22 @@ +Source: libapache-mod-removeip +Section: web +Priority: optional +Maintainer: Mod_removeip Packaging Group +Uploaders: Micah Anderson +Build-Depends: debhelper (>= 4.0.0), dh-apache2, apache2-dev (>= 2.2.3), dpatch +Standards-Version: 3.7.2 + +Package: libapache2-mod-removeip +Architecture: any +Depends: ${shlibs:Depends}, ${misc:Depends} +Description: Module to remove IP from apache2's logs + This package provides the removeip module for the Apache 2 webserver. + This module allows for overwriting Apache's environment variable + REMOTE_ADDR with a fixed value. This is necessary to anonymize all logs + written by Apache and to prevent web applications from accessing the original + IP address. + . + Please be advised that activating this module may cause unexpected side effects + to the behavior of your web applications. + . + Homepage: http://dev.riseup.net/privacy/apache/ --- libapache-mod-removeip-1.0b.orig/debian/changelog +++ libapache-mod-removeip-1.0b/debian/changelog @@ -0,0 +1,67 @@ +libapache-mod-removeip (1.0b-5.1) unstable; urgency=low + + * Non-maintainer upload. + * Port to Apache 2.4 (closes: #666864). + * Remove apache1 packaging harder. + + -- Colin Watson Sat, 13 Jul 2013 12:32:50 +0100 + +libapache-mod-removeip (1.0b-5) unstable; urgency=medium + + * Removed apache1 packaging (Closes: #429129) + + -- Micah Anderson Sun, 29 Jul 2007 14:38:58 -0400 + +libapache-mod-removeip (1.0b-4) unstable; urgency=low + + * Fixed FTBFS if built twice in a row (Closes: #424499) + * Updated README.Debian to have correct apache2 a2enmod line + + -- Micah Anderson Sat, 14 Oct 2006 13:56:36 -0600 + +libapache-mod-removeip (1.0b-3) unstable; urgency=high + + * Updated debian/control to depend on apache2.2-common + instead of apache2-common and increase versioned build + depends on apache2-threaded-dev to 2.2 (Closes: #391786) + + -- Micah Anderson Sun, 8 Oct 2006 12:38:28 -0600 + +libapache-mod-removeip (1.0b-2) unstable; urgency=low + + [Micah Anderson] + * Release + + [Bertagaz] + * Added a patch to replace "localhost" by a correct IP + + -- Micah Anderson Tue, 15 Aug 2006 23:44:38 +0200 + +libapache-mod-removeip (1.0b-1) unstable; urgency=low + + * New upstream release + * Removed duplicated CHANGES in docs + * Updated README.Debian with some details from Alster's mail. + + -- Micah Anderson Sat, 12 Aug 2006 16:09:22 -0400 + +libapache-mod-removeip (0.2-2) unstable; urgency=low + + * Fixed apache2 module configuration location + * Updated README.Debian to have debian way for apache2 + * Updated standards revision to 3.7.2 (no changes) + * Removed substvars from diff + * Added Build-dependency on dpatch + * Added myself to Uploaders field + * Changed modules configs to have standard names + * Updated long description to be more verbose + + -- Micah Anderson Sat, 5 Aug 2006 11:57:08 -0400 + +libapache-mod-removeip (0.2-1) unstable; urgency=low + + * Initial Release. + * Fixed some warnings at compilation time. + + -- bertagaz Fri, 21 Jul 2006 23:34:34 +0200 + --- libapache-mod-removeip-1.0b.orig/debian/patches/40_inet_addr_includes.dpatch +++ libapache-mod-removeip-1.0b/debian/patches/40_inet_addr_includes.dpatch @@ -0,0 +1,18 @@ +#! /bin/sh /usr/share/dpatch/dpatch-run +## 40_inet_addr_includes.dpatch by Colin Watson +## +## All lines beginning with `## DP:' are a description of the patch. +## DP: Add required headers for inet_addr. + +@DPATCH@ +diff -urNad '--exclude=CVS' '--exclude=.svn' '--exclude=.git' '--exclude=.arch' '--exclude=.hg' '--exclude=_darcs' '--exclude=.bzr' libapache-mod-removeip-1.0b~/apache2.0/mod_removeip.c libapache-mod-removeip-1.0b/apache2.0/mod_removeip.c +--- libapache-mod-removeip-1.0b~/apache2.0/mod_removeip.c 2013-07-08 18:13:32.000000000 +0100 ++++ libapache-mod-removeip-1.0b/apache2.0/mod_removeip.c 2013-07-08 18:13:52.993667272 +0100 +@@ -1,3 +1,7 @@ ++#include ++#include ++#include ++ + #include "httpd.h" + #include "http_config.h" + #include "http_core.h" --- libapache-mod-removeip-1.0b.orig/debian/patches/20_localhost_to_IP +++ libapache-mod-removeip-1.0b/debian/patches/20_localhost_to_IP @@ -0,0 +1,32 @@ +#! /bin/sh /usr/share/dpatch/dpatch-run +## 20_localhost_to_IP.dpatch by Bertagaz +## +## All lines beginning with `## DP:' are a description of the patch. +## DP: Patch to replace the "localhsot" string in logs by a correct IP + +@DPATCH@ + +diff -Nadur mod_removeip/libapache-mod-removeip/debian/trunk/apache1.3/mod_removeip.c mod_removeip-1.0b/apache1.3/mod_removeip.c +--- mod_removeip/libapache-mod-removeip/debian/trunk/apache1.3/mod_removeip.c 2006-08-12 22:08:28.000000000 +0200 ++++ mod_removeip-1.0b/apache1.3/mod_removeip.c 2006-08-15 23:11:27.539638272 +0200 +@@ -42,7 +42,7 @@ + if (!cfg->enable) + return DECLINED; + +- r->connection->remote_ip = ap_pstrdup(r->connection->pool, "localhost"); ++ r->connection->remote_ip = ap_pstrdup(r->connection->pool, "127.0.0.1"); + r->connection->remote_addr.sin_addr.s_addr = inet_addr("127.0.0.1"); + + return DECLINED; +diff -Nadur mod_removeip/libapache-mod-removeip/debian/trunk/apache2.0/mod_removeip.c mod_removeip-1.0b/apache2.0/mod_removeip.c +--- mod_removeip/libapache-mod-removeip/debian/trunk/apache2.0/mod_removeip.c 2006-08-12 22:08:28.000000000 +0200 ++++ mod_removeip-1.0b/apache2.0/mod_removeip.c 2006-08-15 23:11:51.249033896 +0200 +@@ -40,7 +40,7 @@ + if (!cfg->enable) + return DECLINED; + +- r->connection->remote_ip = apr_pstrdup(r->connection->pool, "localhost"); ++ r->connection->remote_ip = apr_pstrdup(r->connection->pool, "127.0.0.1"); + r->connection->remote_addr->sa.sin.sin_addr.s_addr = inet_addr("127.0.0.1"); + + return DECLINED; --- libapache-mod-removeip-1.0b.orig/debian/patches/00list +++ libapache-mod-removeip-1.0b/debian/patches/00list @@ -0,0 +1,4 @@ +10_unused_variables +20_localhost_to_IP +30_conn_rec_remote_ip +40_inet_addr_includes --- libapache-mod-removeip-1.0b.orig/debian/patches/30_conn_rec_remote_ip.dpatch +++ libapache-mod-removeip-1.0b/debian/patches/30_conn_rec_remote_ip.dpatch @@ -0,0 +1,27 @@ +#! /bin/sh /usr/share/dpatch/dpatch-run +## 30_conn_rec_remote_ip.dpatch by Colin Watson +## +## All lines beginning with `## DP:' are a description of the patch. +## DP: Handle conn_rec->remote_ip split in Apache 2.4. + +@DPATCH@ +diff -urNad '--exclude=CVS' '--exclude=.svn' '--exclude=.git' '--exclude=.arch' '--exclude=.hg' '--exclude=_darcs' '--exclude=.bzr' libapache-mod-removeip-1.0b~/apache2.0/mod_removeip.c libapache-mod-removeip-1.0b/apache2.0/mod_removeip.c +--- libapache-mod-removeip-1.0b~/apache2.0/mod_removeip.c 2013-07-08 17:57:04.000000000 +0100 ++++ libapache-mod-removeip-1.0b/apache2.0/mod_removeip.c 2013-07-08 18:10:17.968578696 +0100 +@@ -38,8 +38,16 @@ + if (!cfg->enable) + return DECLINED; + ++#if AP_SERVER_MAJORVERSION_NUMBER > 2 || \ ++ (AP_SERVER_MAJORVERSION_NUMBER == 2 && AP_SERVER_MINORVERSION_NUMBER >= 4) ++ r->connection->client_ip = apr_pstrdup(r->connection->pool, "127.0.0.1"); ++ r->connection->client_addr->sa.sin.sin_addr.s_addr = inet_addr("127.0.0.1"); ++ r->useragent_ip = apr_pstrdup(r->connection->pool, "127.0.0.1"); ++ r->useragent_addr->sa.sin.sin_addr.s_addr = inet_addr("127.0.0.1"); ++#else + r->connection->remote_ip = apr_pstrdup(r->connection->pool, "127.0.0.1"); + r->connection->remote_addr->sa.sin.sin_addr.s_addr = inet_addr("127.0.0.1"); ++#endif + + return DECLINED; + } --- libapache-mod-removeip-1.0b.orig/debian/patches/10_unused_variables +++ libapache-mod-removeip-1.0b/debian/patches/10_unused_variables @@ -0,0 +1,32 @@ +#! /bin/sh /usr/share/dpatch/dpatch-run +## 10_unused_variables.dpatch by bertagaz +## +## All lines beginning with `## DP:' are a description of the patch. +## DP: Patch to remove warnings at compilation time + +@DPATCH@ + +diff -urNad mod_removeip-1.0a/apache1.3/mod_removeip.c mod_removeip-1.0a_tmp/apache1.3/mod_removeip.c +--- mod_removeip-1.0a/apache1.3/mod_removeip.c 2005-04-06 13:52:50.000000000 +0200 ++++ mod_removeip-1.0a_tmp/apache1.3/mod_removeip.c 2006-08-10 12:05:00.655401744 +0200 +@@ -34,8 +34,6 @@ + + + static int change_remote_ip(request_rec *r) { +- const char *fwdvalue; +- char *val; + removeip_server_cfg *cfg = (removeip_server_cfg *)ap_get_module_config(r->server->module_config, + &removeip_module); + +diff -urNad mod_removeip-1.0a/apache2.0/mod_removeip.c mod_removeip-1.0a_tmp/apache2.0/mod_removeip.c +--- mod_removeip-1.0a/apache2.0/mod_removeip.c 2006-02-07 12:52:36.000000000 +0100 ++++ mod_removeip-1.0a_tmp/apache2.0/mod_removeip.c 2006-08-10 12:05:13.447457056 +0200 +@@ -32,8 +32,6 @@ + } + + static int change_remote_ip(request_rec *r) { +- const char *fwdvalue; +- char *val; + removeip_server_cfg *cfg = (removeip_server_cfg *)ap_get_module_config(r->server->module_config, + &removeip_module); +