Gentoo Archives: gentoo-hardened

From: Jeronimo Zucco <jczucco@×××.br>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] Apache2 segfaults
Date: Mon, 05 May 2008 16:45:28
Message-Id: 481F399E.1080506@ucs.br
In Reply to: [gentoo-hardened] Apache2 segfaults by atoth@atoth.sote.hu
1 atoth@××××××××××.hu wrote:
2 > Apache: 2.2.8
3 > PHP: 5.2.6
4 > Suhosin: 0.9.23
5 > Eaccelerator: 0.9.5.1 (apache2 contentcache disassembler inode session
6 > -debug -sharedmem)
7 > Apps: squirrelmail, tikiwiki...
8 >
9 > pax.log: no messages.
10 > kern.log:
11 > "May 2 21:28:09 localhost grsec: From 62.165.243.164: signal 11 sent to
12 > /usr/sbin/apache2[apache2:12343] uid/euid:81/81 gid/egid:81/81, parent
13 > /usr/sbin/apache2[apache2:5035] uid/euid:0/0 gid/egid:0/0
14 > May 2 21:28:09 localhost apache2[12351]: segfault at 0000000b eip
15 > 4b931a47 esp 5c8bf040 error 4
16 > May 2 21:28:09 localhost grsec: From 62.165.243.164: signal 11 sent to
17 > /usr/sbin/apache2[apache2:12351] uid/euid:81/81 gid/egid:81/81, parent
18 > /usr/sbin/apache2[apache2:5035] uid/euid:0/0 gid/egid:0/0
19 > May 2 21:28:09 localhost apache2[5119]: segfault at 0000000b eip 4b931a47
20 > esp 5c8beff0 error 4
21 > May 2 21:28:09 localhost grsec: From 62.165.243.164: signal 11 sent to
22 > /usr/sbin/apache2[apache2:5119] uid/euid:81/81 gid/egid:81/81, parent
23 > /usr/sbin/apache2[apache2:5035] uid/euid:0/0 gid/egid:0/0
24 > May 2 21:28:09 localhost apache2[17861]: segfault at 0000000b eip
25 > 4b931a47 esp 5c8bf040 error 4"
26 >
27 > The setup seems to work quite well despite the error messages after
28 > restarting apache following a php version bump.
29 > Has anyone experienced error logs like this?
30 >
31 > Regards,
32 > Dw.
33 >
34
35 Try to debug with:
36
37 strace ./httpd -X -D FOREGROUND
38
39
40 I have this kind of problems running apache + modpython beacause a
41 conflict in expat library versions, I don't know if is the same case:
42
43 http://www.dscpl.com.au/wiki/ModPython/Articles/ExpatCausingApacheCrash
44
45 --
46 Jeronimo Zucco
47 LPIC-1 Linux Professional Institute Certified
48 Núcleo de Processamento de Dados
49 Universidade de Caxias do Sul
50
51 http://jczucco.blogspot.com
52
53 --
54 gentoo-hardened@l.g.o mailing list