Bug#294769: apache2-mpm-prefork: fails to fork properly, SEGVs
Package: apache2-mpm-prefork
Version: 2.0.53-2
Severity: important
NOTE:
this bug applies to version -3, not this version mentioned above (-2).
description:
the daemon would seem to start normally, but it doesn't grsec reporting
a segv in apache2; then error.log entries like this:
============================
[Fri Feb 11 14:13:40 2005] [notice] Digest: generating secret for digest authentication ...
[Fri Feb 11 14:13:40 2005] [notice] Digest: done
[Fri Feb 11 14:13:40 2005] [notice] LDAP: Built with OpenLDAP LDAP SDK
[Fri Feb 11 14:13:40 2005] [notice] LDAP: SSL support unavailable
[Fri Feb 11 14:13:40 2005] [info] PAM: mod_auth_pam/2.0-1.1
[Fri Feb 11 14:13:40 2005] [notice] mod_python: Creating 32 session mutexes based on 100 max processes and 0 max threads.
[Fri Feb 11 14:13:40 2005] [error] (28)No space left on device: mod_python: Failed to create global mutex 14 of 32 (/tmp/mpmtx56
8314).
[Fri Feb 11 14:13:40 2005] [error] mod_python: We can probably continue, but with diminished ability to process session locks.
[Fri Feb 11 14:13:40 2005] [error] mod_python: Hint: On Linux, the problem may be the number of available semaphores, check 'sys
ctl kernel.sem'
[Fri Feb 11 14:33:18 2005] [info] PAM: mod_auth_pam/2.0-1.1
[Fri Feb 11 14:33:18 2005] [info] Init: Initializing OpenSSL library
[Fri Feb 11 14:33:19 2005] [info] Init: Seeding PRNG with 1160 bytes of entropy
[Fri Feb 11 14:33:19 2005] [info] Init: Generating temporary RSA private keys (512/1024 bits)
[Fri Feb 11 14:33:22 2005] [info] Init: Generating temporary DH parameters (512/1024 bits)
[Fri Feb 11 14:33:22 2005] [info] Init: Initializing (virtual) servers for SSL
[Fri Feb 11 14:33:22 2005] [info] Server: Apache/2.0.53, Interface: mod_ssl/2.0.53, Library: OpenSSL/0.9.7e
[Fri Feb 11 14:33:22 2005] [notice] suEXEC mechanism enabled (wrapper: /usr/lib/apache2/suexec2)
[Fri Feb 11 14:33:22 2005] [info] mod_unique_id: using ip addr 127.0.0.1
[Fri Feb 11 14:33:23 2005] [error] (28)No space left on device: mod_security: Could not create modsec_auditlog_lock
Configuration Failed
[Fri Feb 11 14:52:19 2005] [info] PAM: mod_auth_pam/2.0-1.1
[Fri Feb 11 14:52:19 2005] [info] Init: Initializing OpenSSL library
[Fri Feb 11 14:52:19 2005] [info] Init: Seeding PRNG with 1160 bytes of entropy
[Fri Feb 11 14:52:19 2005] [info] Init: Generating temporary RSA private keys (512/1024 bits)
[Fri Feb 11 14:52:23 2005] [info] Init: Generating temporary DH parameters (512/1024 bits)
[Fri Feb 11 14:52:23 2005] [info] Init: Initializing (virtual) servers for SSL
[Fri Feb 11 14:52:23 2005] [info] Server: Apache/2.0.53, Interface: mod_ssl/2.0.53, Library: OpenSSL/0.9.7e
[Fri Feb 11 14:52:23 2005] [notice] suEXEC mechanism enabled (wrapper: /usr/lib/apache2/suexec2)
[Fri Feb 11 14:52:23 2005] [info] mod_unique_id: using ip addr 127.0.0.1
[Fri Feb 11 14:52:24 2005] [error] (28)No space left on device: mod_security: Could not create modsec_auditlog_lock
Configuration Failed
[Fri Feb 11 14:53:04 2005] [info] PAM: mod_auth_pam/2.0-1.1
[Fri Feb 11 14:56:45 2005] [notice] LDAP: SSL support unavailable
[Fri Feb 11 14:56:45 2005] [info] PAM: mod_auth_pam/2.0-1.1
[Fri Feb 11 15:03:11 2005] [info] PAM: mod_auth_pam/2.0-1.1
[Fri Feb 11 15:03:11 2005] [crit] (28)No space left on device: mod_rewrite: could not create rewrite_log_lock
Configuration Failed
=========================
i then subsequently disable those modules. still doesn't start. i never
set it on debug level, but i could see from an strace and the logs it
wasn't functioning correctly. but i'd only see things like this in
error.log:
=========================
[Fri Feb 11 15:19:44 2005] [info] Init: Initializing OpenSSL library
[Fri Feb 11 15:19:44 2005] [info] Init: Seeding PRNG with 1160 bytes of entropy
[Fri Feb 11 15:19:44 2005] [info] Init: Generating temporary RSA private keys (512/1024 bits)
[Fri Feb 11 15:19:45 2005] [info] Init: Generating temporary DH parameters (512/1024 bits)
[Fri Feb 11 15:19:45 2005] [info] Init: Initializing (virtual) servers for SSL
[Fri Feb 11 15:19:45 2005] [info] Server: Apache/2.0.53, Interface: mod_ssl/2.0.53, Library: OpenSSL/0.9.7e
[Fri Feb 11 15:19:45 2005] [notice] suEXEC mechanism enabled (wrapper: /usr/lib/apache2/suexec2)
[Fri Feb 11 15:19:45 2005] [info] mod_unique_id: using ip addr 127.0.0.1
[Fri Feb 11 15:19:48 2005] [notice] Digest: generating secret for digest authentication ...
[Fri Feb 11 15:19:48 2005] [notice] Digest: done
[Fri Feb 11 15:19:48 2005] [notice] LDAP: Built with OpenLDAP LDAP SDK
[Fri Feb 11 15:19:48 2005] [notice] LDAP: SSL support unavailable
[Fri Feb 11 15:19:48 2005] [info] PAM: mod_auth_pam/2.0-1.1
===================
it would seem to start, and even have a PID (from 'pidof apache2'),
but it wouldn't fork off, and i'd have to kill it.
here's some of the last page of strace:
===================
16237 open("/usr/lib/php4/20020429-zts/pam_auth.so", O_RDONLY) = 95
16237 read(95,
"\177ELF\1\2\1\0\0\0\0\0\0\0\0\0\0\3\0\24\0\0\0\1\0\0\36"..., 512) = 512
16237 fstat64(95, {st_mode=S_IFREG|0644, st_size=12308, ...}) = 0
16237 mmap(0xcdaf000, 77008, PROT_READ|PROT_EXEC, MAP_PRIVATE, 95, 0) =
0xcdaf000
16237 mprotect(0xcdb2000, 64720, PROT_NONE) = 0
16237 mmap(0xcdbf000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC,
MAP_PRIVATE|MAP_FIXED, 95, 0) = 0xcdbf000
16237 close(95) = 0
16237 --- SIGSEGV (Segmentation fault) @ 0 (0) ---
28911 <... select resumed> ) = 1 (in [95], left {718,
170000})
28911 read(95, "0B\2\1\3d=\4", 8) = 8
28911 read(95, "&cn=www-data,ou=Group,dc=kisikew"..., 60) = 60
28911 time([1108136674]) = 1108136674
28911 time(NULL) = 1108136674
28911 select(1024, [95], [], NULL, {720, 0}) = 1 (in [95], left {719,
999000})
28911 read(95, "0B\2\1\3d=\4", 8) = 8
28911 read(95, "$cn=wwwdev,ou=Group,dc=kisikew,d"..., 60) = 60
28911 time([1108136674]) = 1108136674
28911 time(NULL) = 1108136674
28911 select(1024, [95], [], NULL, {720, 0}) = 1 (in [95], left {720,
0})
28911 read(95, "0E\2\1\3d@\4", 8) = 8
28911 read(95, "\'cn=www-users,ou=Group,dc=kisike"..., 63) = 63
28911 time([1108136674]) = 1108136674
28911 time(NULL) = 1108136674
28911 select(1024, [95], [], NULL, {720, 0}) = 1 (in [95], left {719,
999000})
28911 read(95, "0\f\2\1\3e\7\n", 8) = 8
28911 read(95, "\1\0\4\0\4\0", 6) = 6
28911 time(NULL) = 1108136674
28911 geteuid() = 0
28911 time([1108136674]) = 1108136674
28911 rt_sigaction(SIGPIPE, {SIG_DFL}, NULL, 8) = 0
28911 setgroups(3, [33, 1005, 1008]) = 0
28911 geteuid() = 0
28911 setuid(33) = 0
28911 accept(94, 0x7fffe6f0, [110]) = ? ERESTARTSYS (To be
restarted)
28911 --- SIGTERM (Terminated) @ 0 (0) ---
====================
i've downgraded both php4 packages and apache2 packages, to get it
functioning again (though it seems that the php4 [for once ;] seems
functional it itself.
apologies for the length of the report.
ec
-- System Information:
Debian Release: 3.1
APT prefers unstable
APT policy: (1000, 'unstable'), (998, 'experimental')
Architecture: powerpc (ppc)
Kernel: Linux 2.6.10-grsec
Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8)
Versions of packages apache2-mpm-prefork depends on:
ii apache2-common 2.0.53-2 next generation, scalable, extenda
ii libapr0 2.0.53-3 the Apache Portable Runtime
ii libc6 2.3.2.ds1-20 GNU C Library: Shared libraries an
ii libdb4.2 4.2.52-18 Berkeley v4.2 Database Libraries [
ii libexpat1 1.95.8-1 XML parsing C library - runtime li
ii libldap2 2.2.20-0.1 OpenLDAP libraries
ii libssl0.9.7 0.9.7e-3 SSL shared libraries
ii zlib1g 1:1.2.2-4 compression library - runtime
-- no debconf information
Reply to: