Gentoo Archives: gentoo-hardened

From: John Tate <john@××××××××.org>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] Re: nginx worker crashes, grsec denial
Date: Sat, 01 Nov 2014 15:42:49
Message-Id: CAHnfuAuOp3Q6SVNewOuyOaZMs6KeyObvAYNkxghWbbGcpCcrhw@mail.gmail.com
In Reply to: Re: [gentoo-hardened] Re: nginx worker crashes, grsec denial by "Anthony G. Basile"
1 On Mon, Oct 27, 2014 at 11:19 PM, Anthony G. Basile
2 <basile@××××××××××××××.edu> wrote:
3 > On 10/23/14 09:35, John Tate wrote:
4 >>
5 >> I just realized this error is because of the attempt to dump core. It
6 >> is not why nginx is crashing.
7 >>
8 >> Sorry.
9 >>
10 >
11 > "RLIMIT_CORE against limit 0" is just grsec telling you that nginx tried to
12 > dump core bigger than size 0 bytes. You can use ulimit to get that core if
13 > you like. But even if the kernel were killing it, this is a problem in
14 > nginx. Most problem where the hardened kernel prevents stuff from happening
15 > is an issue with the app itself. Convincing upstream to fix their clever
16 > feature is the hard part. eg. JIT code in python and libffi and cffi, etc.
17
18 Thanks, though I worked that out. I migrated the system from
19 VirtualBox to Xen and thought the only thing that had to be changed
20 was the kernel. It turns out that nginx itself needed to be rebuilt
21 for this system. I asked for help prematurely having assumed the
22 problem was out of my league.
23
24 >
25 > --
26 > Anthony G. Basile, Ph. D.
27 > Chair of Information Technology
28 > D'Youville College
29 > Buffalo, NY 14201
30 > (716) 829-8197
31 >
32
33
34
35 --
36 www.johntate.org

Replies

Subject Author
[gentoo-hardened] gcc without fortran useflag and ekopath Giuseppe Scaglione <giuseppe.scaglione.pa@×××××.com>