Bug#713967: apache2-bin: daemon doesn't close all fds on fork - which causes postinst with debconf to hang
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Package: apache2-bin
Version: 2.4.4-6
Severity: important
Hey Apache maintainers,
while updating the icinga-web packaging for Apache 2.4 I noticed a
problem with my postinst script.
I'm using dbconfig-commong and debconf, which opens a fd (3) to
communicate with debconf storage.
While testing the changes, my postinst script hung at the end, due to
the fd still being opened by Apache.
This should be reproducable by reconfiguring any package that uses
debconf and reloads Apache.
Following a bit debug information. I've had similar issues with other
daemons in the past, and all I read about it, is that the daemon must
close all fds he hasn't opened himself.
Best Regards
Markus Frosch
icinga-web's new postinst script: ( not yet in unstable )
http://anonscm.debian.org/gitweb/?p=pkg-nagios/pkg-icinga-web.git;a=blob;f=debian/icinga-web.postinst
Process view:
$ ps -ef
...
root 35786 10015 0 11:43 pts/2 00:00:00 sudo dpkg-reconfigure
icinga-web
root 35787 35786 0 11:43 pts/2 00:00:00 /usr/bin/perl -w
/usr/sbin/dpkg-reconfigure icinga-web
root 36012 35787 0 11:43 pts/2 00:00:00 [icinga-web.post]
<defunct>
root 36277 1 0 11:43 ? 00:00:00 /usr/sbin/apache2 -k start
root 35786 10015 0 11:43 pts/2 00:00:00 sudo dpkg-reconfigure
icinga-web
...
$ lsof -p 35787 | grep pipe
dpkg-reco 35787 root 11r FIFO 0,8 0t0 74215 pipe
$ lsof -p 36277 | grep pipe
apache2 36277 root 3w FIFO 0,8 0t0 74215 pipe
- -- Package-specific info:
- -- System Information:
Debian Release: jessie/sid
APT prefers testing
APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Kernel: Linux 3.2.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages apache2-bin depends on:
ii libapr1 1.4.6-4
ii libaprutil1 1.5.2-1
ii libaprutil1-dbd-sqlite3 1.5.2-1
ii libaprutil1-ldap 1.5.2-1
ii libc6 2.17-3
ii libcap2 1:2.22-1.2
ii libldap-2.4-2 2.4.31-1+nmu2
ii liblua5.1-0 5.1.5-4
ii libpcre3 1:8.31-2
ii libssl1.0.0 1.0.1e-3
ii libxml2 2.8.0+dfsg1-7+nmu1
ii perl 5.14.2-21
ii zlib1g 1:1.2.8.dfsg-1
apache2-bin recommends no packages.
Versions of packages apache2-bin suggests:
pn apache2-doc <none>
pn apache2-suexec-pristine | apache2-suexec-custom <none>
ii w3m [www-browser] 0.5.3-8
Versions of packages apache2 depends on:
ii apache2-data 2.4.4-6
ii lsb-base 4.1+Debian11
ii mime-support 3.54
ii perl 5.14.2-21
ii procps 1:3.3.4-2
Versions of packages apache2 recommends:
ii ssl-cert 1.0.32
Versions of packages apache2 suggests:
pn apache2-doc <none>
pn apache2-suexec-pristine | apache2-suexec-custom <none>
ii apache2-utils 2.2.22-13
ii w3m [www-browser] 0.5.3-8
Versions of packages apache2-bin is related to:
ii apache2 2.4.4-6
ii apache2-bin 2.4.4-6
- -- no debconf information
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iQEcBAEBAgAGBQJRyC+6AAoJEGKVX2ubH1iD72MH/j41EyRteC+/3Bfz1fMF7grp
9xkahFX51pxD9PglZdzVCjXih0VE8Eg7yAaFIcP9pDxlt7K6y4hLgUWdbE0s+eY2
BqkbLOq2R5sC3v4SG4HDQ8occkBWzZJ/HiBvhzS+fqZsSKv+7SltwuwOjR9TrDtC
1Ls0i6JlRsgI+SR6gesrLjHaTs/BQMEpMw+zhdWa9XKsih58slDC2DJaz+NB46KD
mGQ5CFGf3o6i/cP/9K9NGDZmbzgDTtVFwMgsJFRgJvQ2w5u45PeqEm7C8N0st663
1l6FdmbCmQFw3WWORv2JARLoo0CLYyqn1S7QIYs5cBnqtvzrMieGz/xR7f4GHsY=
=VflD
-----END PGP SIGNATURE-----
Reply to: