Gentoo Archives: gentoo-hardened

From: "Anthony G. Basile" <basile@××××××××××××××.edu>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] Re: nginx worker crashes, grsec denial
Date: Mon, 27 Oct 2014 12:18:03
Message-Id: 544E384E.8010407@opensource.dyc.edu
In Reply to: [gentoo-hardened] Re: nginx worker crashes, grsec denial by John Tate
1 On 10/23/14 09:35, John Tate wrote:
2 > I just realized this error is because of the attempt to dump core. It
3 > is not why nginx is crashing.
4 >
5 > Sorry.
6 >
7
8 "RLIMIT_CORE against limit 0" is just grsec telling you that nginx tried
9 to dump core bigger than size 0 bytes. You can use ulimit to get that
10 core if you like. But even if the kernel were killing it, this is a
11 problem in nginx. Most problem where the hardened kernel prevents stuff
12 from happening is an issue with the app itself. Convincing upstream to
13 fix their clever feature is the hard part. eg. JIT code in python and
14 libffi and cffi, etc.
15
16 --
17 Anthony G. Basile, Ph. D.
18 Chair of Information Technology
19 D'Youville College
20 Buffalo, NY 14201
21 (716) 829-8197

Replies

Subject Author
Re: [gentoo-hardened] Re: nginx worker crashes, grsec denial John Tate <john@××××××××.org>