On Tue, 17 Jul 2018 20:54:02 +0200, Stefan Fritsch wrote:
> Can one of you please check how libcap-ng is pulled into the process.
> Something like this should do the trick (replace XXX with the pid of one of
> your apache processes, you need to be root to do this) :
>
> pid=XXX; for i in $(awk '{ print $6 }' < /proc/$pid/maps|sort -u|grep /) ; do
> readelf -d $i|grep libcap && echo $i ; done
# pid=6855; for i in $(awk '{ print $6 }' < /proc/$pid/maps|sort -u|grep /) ; do readelf -d $i|grep libcap && echo $i ; done
readelf: Error: '/dev/zero' is not an ordinary file
0x0000000000000001 (NEEDED) Shared library: [libcap-ng.so.0]
/lib/x86_64-linux-gnu/libaudit.so.1.0.0
0x000000000000000e (SONAME) Library soname: [libcap-ng.so.0]
/lib/x86_64-linux-gnu/libcap-ng.so.0.0.0
readelf: Error: '/SYSV6400005e': No such file
readelf: Error: Not an ELF file - it has the wrong magic bytes at the start
Cheers,
gregor
--
.''`. https://info.comodo.priv.at -- Debian Developer https://www.debian.org
: :' : OpenPGP fingerprint D1E1 316E 93A7 60A8 104D 85FA BB3A 6801 8649 AA06
`. `' Member VIBE!AT & SPI Inc. -- Supporter Free Software Foundation Europe
`- NP: STS: Verlor'n
Attachment:
signature.asc
Description: Digital Signature