view init.d/kallithea-upstart.conf @ 7397:3ee4ac068369 stable

hg: explicit handling of the 'batch' protocol command - consider it a "push" command if any of the batch commands are This change mitigates some privilege escalation problems like CVE-2018-1000132 which was fixed in Mercurial 4.5.1 and currently is described on https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.5.1_.2F_4.5.2_.282018-03-06.29 .
author Mads Kiilerich <mads@kiilerich.com>
date Sun, 21 Oct 2018 15:18:43 +0200
parents 24c0d584ba86
children e285bb7abb28
line wrap: on
line source

# kallithea - run the kallithea daemon as an upstart job
# Change variables/paths as necessary and place file /etc/init/kallithea.conf
# start/stop/restart as normal upstart job (ie: $ start kallithea)

description	"Kallithea Mercurial Server"
author		"Matt Zuba <matt.zuba@goodwillaz.org"

start on (local-filesystems and runlevel [2345])
stop on runlevel [!2345]

respawn

umask 0022

env PIDFILE=/var/hg/kallithea/kallithea.pid
env LOGFILE=/var/hg/kallithea/log/kallithea.log
env APPINI=/var/hg/kallithea/production.ini
env HOME=/var/hg
env USER=hg
env GROUP=hg

exec /var/hg/.virtualenvs/kallithea/bin/paster serve --user=$USER --group=$GROUP --pid-file=$PIDFILE --log-file=$LOGFILE $APPINI

post-stop script
	rm -f $PIDFILE
end script