8b381c7feb
- Replace fpm with rpmbuild for standard RPM packaging - Add mod_reqin_log.spec file with Version, %install, %files, %changelog - Use Rocky Linux 9 as package-builder base image - Extract version automatically from .spec file - Remove CHANGELOG file (changelog now in .spec) - Build RPMs for el8, el9, el10 distributions Verified RPM metadata: Name: mod_reqin_log Version: 1.0.2 Release: 1.el8/el9/el10 License: Apache-2.0 Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>
69 lines
2.7 KiB
RPMSpec
69 lines
2.7 KiB
RPMSpec
Name: mod_reqin_log
|
|
Version: 1.0.2
|
|
Release: 1%{?dist}
|
|
Summary: Apache HTTPD module for logging HTTP requests as JSON to Unix socket
|
|
|
|
License: Apache-2.0
|
|
URL: https://github.com/example/mod_reqin_log
|
|
Vendor: Developer <dev@example.com>
|
|
BuildArch: x86_64
|
|
|
|
Requires: httpd
|
|
|
|
%description
|
|
Apache HTTPD module for logging HTTP requests as JSON to Unix socket.
|
|
Features non-blocking I/O with automatic reconnection, configurable headers
|
|
with truncation support, and built-in sensitive headers blacklist.
|
|
|
|
%prep
|
|
# No source extraction needed - binaries are pre-built
|
|
|
|
%build
|
|
# No build needed - binaries are pre-built
|
|
|
|
%install
|
|
mkdir -p %{buildroot}/%{_libdir}/httpd/modules
|
|
mkdir -p %{buildroot}/%{_sysconfdir}/httpd/conf.d
|
|
mkdir -p %{buildroot}/%{_docdir}/%{name}
|
|
|
|
install -m 755 %{_pkgroot}/%{_libdir}/httpd/modules/mod_reqin_log.so %{buildroot}/%{_libdir}/httpd/modules/
|
|
install -m 644 %{_pkgroot}/%{_sysconfdir}/httpd/conf.d/mod_reqin_log.conf %{buildroot}/%{_sysconfdir}/httpd/conf.d/
|
|
|
|
%files
|
|
%{_libdir}/httpd/modules/mod_reqin_log.so
|
|
%{_sysconfdir}/httpd/conf.d/mod_reqin_log.conf
|
|
%doc %{_docdir}/%{name}
|
|
|
|
%changelog
|
|
* Sat Feb 28 2026 Developer <dev@example.com> - 1.0.2
|
|
- SECURITY: Add input sanitization for method, path, host, and http_version fields
|
|
- SECURITY: Add Host header truncation (256 chars max) to prevent log injection
|
|
- IMPROVEMENT: Add LOG_THROTTLED macro for consistent error reporting
|
|
- IMPROVEMENT: Improve socket state double-check pattern
|
|
- IMPROVEMENT: Fix const qualifier warnings in get_header() function
|
|
- IMPROVEMENT: Add flags field to module definition
|
|
- IMPROVEMENT: Add -Wno-error=format-security to Makefile
|
|
- TEST: Add 4 new unit tests for input sanitization
|
|
- DOC: Clarify timestamp precision
|
|
- DOC: Update README and architecture.yml
|
|
- BUILD: Update package version to 1.0.2
|
|
|
|
* Fri Feb 27 2026 Developer <dev@example.com> - 1.0.1
|
|
- FIX: Fix socket reconnection logic
|
|
- FIX: Improve error logging to prevent error_log flooding
|
|
- IMPROVEMENT: Add built-in sensitive headers blacklist
|
|
- IMPROVEMENT: Add thread-safe socket FD access via mutex
|
|
- TEST: Add comprehensive unit tests
|
|
- TEST: Add integration tests for socket loss and recovery
|
|
- DOC: Add comprehensive README with configuration examples
|
|
- DOC: Add architecture.yml documenting module design decisions
|
|
|
|
* Thu Feb 26 2026 Developer <dev@example.com> - 1.0.0
|
|
- Initial release
|
|
- Apache HTTPD 2.4 module for logging HTTP requests as JSON to Unix socket
|
|
- Non-blocking I/O with automatic reconnection
|
|
- Configurable headers with truncation support
|
|
- Compatible with prefork, worker, and event MPMs
|
|
- Built-in sensitive headers blacklist
|
|
- Throttled error reporting to prevent log flooding
|