8335b1
--- httpd/modules/mappers/mod_rewrite.c  2015/03/06 08:55:34 1664564
8335b1
+++ httpd/modules/mappers/mod_rewrite.c 2015/03/06 09:14:07 1664565
8335b1
@@ -267,6 +267,8 @@
8335b1
     const char *dbdq;              /* SQL SELECT statement for rewritemap */
8335b1
     const char *checkfile2;        /* filename to check for map existence
8335b1
                                       NULL if only one file               */
8335b1
+    const char *user;              /* run RewriteMap program as this user */
8335b1
+    const char *group;             /* run RewriteMap program as this group */
8335b1
 } rewritemap_entry;
8335b1
 
8335b1
 /* special pattern types for RewriteCond */
8335b1
@@ -1171,6 +1173,7 @@
8335b1
 
8335b1
 static apr_status_t rewritemap_program_child(apr_pool_t *p,
8335b1
                                              const char *progname, char **argv,
8335b1
+                                             const char *user, const char *group,
8335b1
                                              apr_file_t **fpout,
8335b1
                                              apr_file_t **fpin)
8335b1
 {
8335b1
@@ -1183,6 +1186,8 @@
8335b1
                                                   APR_FULL_BLOCK, APR_NO_PIPE))
8335b1
         && APR_SUCCESS == (rc=apr_procattr_dir_set(procattr,
8335b1
                                              ap_make_dirstr_parent(p, argv[0])))
8335b1
+        && (!user || APR_SUCCESS == (rc=apr_procattr_user_set(procattr, user, "")))
8335b1
+        && (!group || APR_SUCCESS == (rc=apr_procattr_group_set(procattr, group)))
8335b1
         && APR_SUCCESS == (rc=apr_procattr_cmdtype_set(procattr, APR_PROGRAM))
8335b1
         && APR_SUCCESS == (rc=apr_procattr_child_errfn_set(procattr,
8335b1
                                                            rewrite_child_errfn))
8335b1
@@ -1240,6 +1245,7 @@
8335b1
         }
8335b1
 
8335b1
         rc = rewritemap_program_child(p, map->argv[0], map->argv,
8335b1
+                                      map->user, map->group,
8335b1
                                       &fpout, &fpin);
8335b1
         if (rc != APR_SUCCESS || fpin == NULL || fpout == NULL) {
8335b1
             ap_log_error(APLOG_MARK, APLOG_ERR, rc, s, APLOGNO(00654)
8335b1
@@ -3018,7 +3024,7 @@
8335b1
 }
8335b1
 
8335b1
 static const char *cmd_rewritemap(cmd_parms *cmd, void *dconf, const char *a1,
8335b1
-                                  const char *a2)
8335b1
+                                  const char *a2, const char *a3)
8335b1
 {
8335b1
     rewrite_server_conf *sconf;
8335b1
     rewritemap_entry *newmap;
8335b1
@@ -3124,6 +3130,11 @@
8335b1
 
8335b1
         newmap->type      = MAPTYPE_PRG;
8335b1
         newmap->checkfile = newmap->argv[0];
8335b1
+        if (a3) {
8335b1
+            char *tok_cntx;
8335b1
+            newmap->user = apr_strtok(apr_pstrdup(cmd->pool, a3), ":", &tok_cntx);
8335b1
+            newmap->group = apr_strtok(NULL, ":", &tok_cntx);
8335b1
+        }
8335b1
     }
8335b1
     else if (strncasecmp(a2, "int:", 4) == 0) {
8335b1
         newmap->type      = MAPTYPE_INT;
8335b1
@@ -5205,8 +5216,8 @@
8335b1
                      "an input string and a to be applied regexp-pattern"),
8335b1
     AP_INIT_RAW_ARGS("RewriteRule",     cmd_rewriterule,     NULL, OR_FILEINFO,
8335b1
                      "an URL-applied regexp-pattern and a substitution URL"),
8335b1
-    AP_INIT_TAKE2(   "RewriteMap",      cmd_rewritemap,      NULL, RSRC_CONF,
8335b1
-                     "a mapname and a filename"),
8335b1
+    AP_INIT_TAKE23(   "RewriteMap",      cmd_rewritemap,      NULL, RSRC_CONF,
8335b1
+                     "a mapname and a filename and options"),
8335b1
     { NULL }
8335b1
 };
8335b1