Bug#809644: apache2: [mpm_prefork:notice] [pid ID] AH00169: caught SIGTERM, shutting down. Every minute
-a entry,always -F arch=b64 -S sigterm -k kill_signals
type=SERVICE_STOP msg=audit(1451735223.016:123): pid=1 uid=0
auid=4294967295 ses=4294967295 msg='unit=apache2 comm="systemd" exe
="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_START msg=audit(1451735233.636:124): pid=1 uid=0
auid=4294967295 ses=4294967295 msg='unit=apache2 comm="systemd" ex
e="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1451735233.636:125): pid=8255 uid=0 auid=0
ses=1631 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron
" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1451735233.636:126): pid=8255 uid=0 auid=0
ses=1631 msg='op=PAM:session_close acct="root" exe="/usr/sbin
/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1451735281.637:127): pid=8372 uid=0
auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" e
xe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1451735281.637:128): pid=8372 uid=0
auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="
/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1451735281.637:129): pid=8372 uid=0
old-auid=4294967295 auid=0 old-ses=4294967295 ses=1632 res=1
type=USER_START msg=audit(1451735281.641:130): pid=8372 uid=0 auid=0
ses=1632 msg='op=PAM:session_open acct="root" exe="/usr/sbi
n/cron" hostname=? addr=? terminal=cron res=success'
type=SERVICE_STOP msg=audit(1451735282.981:131): pid=1 uid=0
auid=4294967295 ses=4294967295 msg='unit=apache2 comm="systemd" exe
="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_START msg=audit(1451735293.164:132): pid=1 uid=0
auid=4294967295 ses=4294967295 msg='unit=apache2 comm="systemd" ex
e="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1451735293.168:133): pid=8372 uid=0 auid=0
ses=1632 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron
" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1451735293.168:134): pid=8372 uid=0 auid=0
ses=1632 msg='op=PAM:session_close acct="root" exe="/usr/sbin
/cron" hostname=? addr=? terminal=cron res=success'
On Sat, 02 Jan 2016 12:02:21 +0100 Stefan Fritsch <sf@sfritsch.de> wrote:
> On Saturday 02 January 2016 14:32:01, Aleksandr Opachev wrote:
> > Process apache2 restart every minute. I'm not find answer in google.
> > I'd tried disable mod_php5 and mod_ssl.
>
> It seems rather unlikely to me that this is a bug in apache2, or more
> people would experience it. Probably something else is sending those
> SIGTERMs to apache. Maybe you could use auditd to find out what is
> sending the signal, see e.g.
> https://www.ibm.com/developerworks/community/blogs/aimsupport/entry/Finding_the_source_of_signals_on_Linux_with_strace_auditd_or_Systemtap?lang=en
>
>
Reply to: