CGI-Wrap Documentation Source Code Change Log;

CGI-Wrap Documentation Source Code Change Log;

These are some of the changes that have occured in CGIwrap from version to version.

Fixed strerror checking in Configure script and util.c for systems without strerror, can now use strerror, sys_errlist, perror, or just errno.
Major documentation overhaul, create all HTML based docs
Added option (defaulting to yes) to correctly set the PATH_TRANSLATED environment variable.
Fixed bug with the configure script and the use_system option. It would cause a preprocessor error if the system call was not found.
Cleaned up various things with the Configure script
Changed file prompting to allow using ~ paths.

Fixed typo "&" instead of "&&" in setgroups stuff
Added cgiwrap.aliases option to rewrite home dirs of users.
Moved entire cgiwrap source build tree to CVS, will make tracking changes easier.
CGIwrap now changes directories to the directory the script is located in before executing the script. Before, it always just changed to the main CGI directory. This behavior is only different if you were using scripts in subdirectories.
Changed style of cgiwrap.allow, cgiwrap.deny files to be the same as cron's allow/deny files.

Setgroups was being used no matter what you said in configure - fixed
Problem with undefined variables in Log call for subdirectories - fixed
Removed declaration of sys_errlist, and errno in util.c, since I don't think they were necessary. And they were causing problems on some architectures.
Added in user contributed host address checking code
Upgraded to using dist-3.0 PL60 for building the Configure script.
Separated initgroups() and setgroups() checks into two separate defines, and improved documentation in configure script for these options.

argv[0] is now automatically changed to the name of the script that is being executed

MAJOR code cleanup and simplification. The code should be ALOT easier to read and understand.
Fixed the problem in the Makefile on certain architectures with the not being escaped properly. This should solve problems with Linux machines and BSD machines that I know of.
Changes way PATH_INFO is modified, CGIwrap will now correct SCRIPT_NAME for ?user=USER&script=SCRIPT type requests as well as /user/script type requests.
Subdirectories are now supported for both types of requests
Debugging output has been condensed and is a little easier to read.
Documentation has been reworked, it should be a little easier to use.
Fixed prototypes for all the functions in the cgiwrap source.
Removed a few unnecessary routines
Changed "mystrcpy" to be "strdup", and is compiled only if the current architecture does not have strdup available in it's standard library.

Fixed incorrectly indented # directives that were causing problems with some machines.

Added CONF_ALLOWFILE and CONF_DENYFILE options.
Added logging of REMOTE_USER and a status message to the log file
Added an unsupported directory for user contributed scripts and add-ons
Restructured logic for which 'set' method gets used.
Removed option to not check if gid changed, it was an oversight that this was left in. There isn't any case I know of that you wouldn't want to check this.
Moved id setting routines into util.c
Added new source file for allow/deny code.
Removed some error output that didn't make sense (system error messages that were getting returned when I issued a regular cgiwrap error)
Added a 'remake' target to the makefile which does a clean, then a Configure -S, then a make all to rebuild he entire binary. This is useful if you have multiple config.sh files (eg. you're building for several setups from the same dir)

Set up Configure scripts for CGIwrap
Renamed many of the config options to make more consistent
Rearranged directory structure of CGIwrap distribution
Removed "CONF_SANITIZE" option, it is always on now.
Removed "CONF_CHECK_UID" option, it is always on now.
Removed "CONF_FORCE_DEBUG" option, and "CONF_DEBUG_BY_NAME" option, cgiwrap automatically does debugging output by name now.
Added info about setting up an access-controlled cgiwrap which allows users to control access to their scripts.
Renamed DEBUG to CONF_DEBUG to solve a compile problem with some systems wanting to add -DDEBUG to CFLAGS.

Added HTTPD_USER and CHECK_HTTPD_USER to verify that cgiwrap is being called by the server. This is for (access to scripts) security, it doesn't affect system security any.
Added AFS PAG support

Moved rlimit call into new subroutine SetLimits
Changed exec call to an execv and passed argv to support argument passing This will only work correctly for scripts called with no other arguments... Eg, must use "cgiwrap/user/script?" syntax