Package: apache2-mpm-prefork Version: 2.0.53-2 Severity: important NOTE: this bug applies to version -3, not this version mentioned above (-2).
description: the daemon would seem to start normally, but it doesn't grsec reporting a segv in apache2; then error.log entries like this: ============================ [Fri Feb 11 14:13:40 2005] [notice] Digest: generating secret for digest authentication ... [Fri Feb 11 14:13:40 2005] [notice] Digest: done [Fri Feb 11 14:13:40 2005] [notice] LDAP: Built with OpenLDAP LDAP SDK [Fri Feb 11 14:13:40 2005] [notice] LDAP: SSL support unavailable [Fri Feb 11 14:13:40 2005] [info] PAM: mod_auth_pam/2.0-1.1 [Fri Feb 11 14:13:40 2005] [notice] mod_python: Creating 32 session mutexes based on 100 max processes and 0 max threads. [Fri Feb 11 14:13:40 2005] [error] (28)No space left on device: mod_python: Failed to create global mutex 14 of 32 (/tmp/mpmtx56 8314). [Fri Feb 11 14:13:40 2005] [error] mod_python: We can probably continue, but with diminished ability to process session locks. [Fri Feb 11 14:13:40 2005] [error] mod_python: Hint: On Linux, the problem may be the number of available semaphores, check 'sys ctl kernel.sem' [Fri Feb 11 14:33:18 2005] [info] PAM: mod_auth_pam/2.0-1.1 [Fri Feb 11 14:33:18 2005] [info] Init: Initializing OpenSSL library [Fri Feb 11 14:33:19 2005] [info] Init: Seeding PRNG with 1160 bytes of entropy [Fri Feb 11 14:33:19 2005] [info] Init: Generating temporary RSA private keys (512/1024 bits) [Fri Feb 11 14:33:22 2005] [info] Init: Generating temporary DH parameters (512/1024 bits) [Fri Feb 11 14:33:22 2005] [info] Init: Initializing (virtual) servers for SSL [Fri Feb 11 14:33:22 2005] [info] Server: Apache/2.0.53, Interface: mod_ssl/2.0.53, Library: OpenSSL/0.9.7e [Fri Feb 11 14:33:22 2005] [notice] suEXEC mechanism enabled (wrapper: /usr/lib/apache2/suexec2) [Fri Feb 11 14:33:22 2005] [info] mod_unique_id: using ip addr 127.0.0.1 [Fri Feb 11 14:33:23 2005] [error] (28)No space left on device: mod_security: Could not create modsec_auditlog_lock Configuration Failed [Fri Feb 11 14:52:19 2005] [info] PAM: mod_auth_pam/2.0-1.1 [Fri Feb 11 14:52:19 2005] [info] Init: Initializing OpenSSL library [Fri Feb 11 14:52:19 2005] [info] Init: Seeding PRNG with 1160 bytes of entropy [Fri Feb 11 14:52:19 2005] [info] Init: Generating temporary RSA private keys (512/1024 bits) [Fri Feb 11 14:52:23 2005] [info] Init: Generating temporary DH parameters (512/1024 bits) [Fri Feb 11 14:52:23 2005] [info] Init: Initializing (virtual) servers for SSL [Fri Feb 11 14:52:23 2005] [info] Server: Apache/2.0.53, Interface: mod_ssl/2.0.53, Library: OpenSSL/0.9.7e [Fri Feb 11 14:52:23 2005] [notice] suEXEC mechanism enabled (wrapper: /usr/lib/apache2/suexec2) [Fri Feb 11 14:52:23 2005] [info] mod_unique_id: using ip addr 127.0.0.1 [Fri Feb 11 14:52:24 2005] [error] (28)No space left on device: mod_security: Could not create modsec_auditlog_lock Configuration Failed [Fri Feb 11 14:53:04 2005] [info] PAM: mod_auth_pam/2.0-1.1 [Fri Feb 11 14:56:45 2005] [notice] LDAP: SSL support unavailable [Fri Feb 11 14:56:45 2005] [info] PAM: mod_auth_pam/2.0-1.1 [Fri Feb 11 15:03:11 2005] [info] PAM: mod_auth_pam/2.0-1.1 [Fri Feb 11 15:03:11 2005] [crit] (28)No space left on device: mod_rewrite: could not create rewrite_log_lock Configuration Failed ========================= i then subsequently disable those modules. still doesn't start. i never set it on debug level, but i could see from an strace and the logs it wasn't functioning correctly. but i'd only see things like this in error.log: ========================= [Fri Feb 11 15:19:44 2005] [info] Init: Initializing OpenSSL library [Fri Feb 11 15:19:44 2005] [info] Init: Seeding PRNG with 1160 bytes of entropy [Fri Feb 11 15:19:44 2005] [info] Init: Generating temporary RSA private keys (512/1024 bits) [Fri Feb 11 15:19:45 2005] [info] Init: Generating temporary DH parameters (512/1024 bits) [Fri Feb 11 15:19:45 2005] [info] Init: Initializing (virtual) servers for SSL [Fri Feb 11 15:19:45 2005] [info] Server: Apache/2.0.53, Interface: mod_ssl/2.0.53, Library: OpenSSL/0.9.7e [Fri Feb 11 15:19:45 2005] [notice] suEXEC mechanism enabled (wrapper: /usr/lib/apache2/suexec2) [Fri Feb 11 15:19:45 2005] [info] mod_unique_id: using ip addr 127.0.0.1 [Fri Feb 11 15:19:48 2005] [notice] Digest: generating secret for digest authentication ... [Fri Feb 11 15:19:48 2005] [notice] Digest: done [Fri Feb 11 15:19:48 2005] [notice] LDAP: Built with OpenLDAP LDAP SDK [Fri Feb 11 15:19:48 2005] [notice] LDAP: SSL support unavailable [Fri Feb 11 15:19:48 2005] [info] PAM: mod_auth_pam/2.0-1.1 =================== it would seem to start, and even have a PID (from 'pidof apache2'), but it wouldn't fork off, and i'd have to kill it. here's some of the last page of strace: =================== 16237 open("/usr/lib/php4/20020429-zts/pam_auth.so", O_RDONLY) = 95 16237 read(95, "\177ELF\1\2\1\0\0\0\0\0\0\0\0\0\0\3\0\24\0\0\0\1\0\0\36"..., 512) = 512 16237 fstat64(95, {st_mode=S_IFREG|0644, st_size=12308, ...}) = 0 16237 mmap(0xcdaf000, 77008, PROT_READ|PROT_EXEC, MAP_PRIVATE, 95, 0) = 0xcdaf000 16237 mprotect(0xcdb2000, 64720, PROT_NONE) = 0 16237 mmap(0xcdbf000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 95, 0) = 0xcdbf000 16237 close(95) = 0 16237 --- SIGSEGV (Segmentation fault) @ 0 (0) --- 28911 <... select resumed> ) = 1 (in [95], left {718, 170000}) 28911 read(95, "0B\2\1\3d=\4", 8) = 8 28911 read(95, "&cn=www-data,ou=Group,dc=kisikew"..., 60) = 60 28911 time([1108136674]) = 1108136674 28911 time(NULL) = 1108136674 28911 select(1024, [95], [], NULL, {720, 0}) = 1 (in [95], left {719, 999000}) 28911 read(95, "0B\2\1\3d=\4", 8) = 8 28911 read(95, "$cn=wwwdev,ou=Group,dc=kisikew,d"..., 60) = 60 28911 time([1108136674]) = 1108136674 28911 time(NULL) = 1108136674 28911 select(1024, [95], [], NULL, {720, 0}) = 1 (in [95], left {720, 0}) 28911 read(95, "[EMAIL PROTECTED]", 8) = 8 28911 read(95, "\'cn=www-users,ou=Group,dc=kisike"..., 63) = 63 28911 time([1108136674]) = 1108136674 28911 time(NULL) = 1108136674 28911 select(1024, [95], [], NULL, {720, 0}) = 1 (in [95], left {719, 999000}) 28911 read(95, "0\f\2\1\3e\7\n", 8) = 8 28911 read(95, "\1\0\4\0\4\0", 6) = 6 28911 time(NULL) = 1108136674 28911 geteuid() = 0 28911 time([1108136674]) = 1108136674 28911 rt_sigaction(SIGPIPE, {SIG_DFL}, NULL, 8) = 0 28911 setgroups(3, [33, 1005, 1008]) = 0 28911 geteuid() = 0 28911 setuid(33) = 0 28911 accept(94, 0x7fffe6f0, [110]) = ? ERESTARTSYS (To be restarted) 28911 --- SIGTERM (Terminated) @ 0 (0) --- ==================== i've downgraded both php4 packages and apache2 packages, to get it functioning again (though it seems that the php4 [for once ;] seems functional it itself. apologies for the length of the report. ec -- System Information: Debian Release: 3.1 APT prefers unstable APT policy: (1000, 'unstable'), (998, 'experimental') Architecture: powerpc (ppc) Kernel: Linux 2.6.10-grsec Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8) Versions of packages apache2-mpm-prefork depends on: ii apache2-common 2.0.53-2 next generation, scalable, extenda ii libapr0 2.0.53-3 the Apache Portable Runtime ii libc6 2.3.2.ds1-20 GNU C Library: Shared libraries an ii libdb4.2 4.2.52-18 Berkeley v4.2 Database Libraries [ ii libexpat1 1.95.8-1 XML parsing C library - runtime li ii libldap2 2.2.20-0.1 OpenLDAP libraries ii libssl0.9.7 0.9.7e-3 SSL shared libraries ii zlib1g 1:1.2.2-4 compression library - runtime -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]