grsecurity forums

Hi im using 2.4.19 with grsec-1.9.7 i chrooted squid (im paranoid), and when im trying to start it i get this error:

Oct 9 16:46:37 obelix kernel: grsec: signal 6 sent to (squid:15229) UID(0) EUID(13), parent (squid:25693) UID(0) EUID(0)

I straced the startup script, and it seems to be that the daemon start fine, but after a short period of time the child exits:

wait4(-1, [WIFEXITED(s) && WEXITSTATUS(s) == 0], WNOHANG, NULL) = 12525
wait4(-1, 0x5c1712e8, WNOHANG, NULL) = -1 ECHILD (No child processes)
sigreturn() = ? (mask now [])
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigaction(SIGINT, {0x806e2f8, [], 0x4000000}, {SIG_DFL}, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD TTOU], [CHLD], 8) = 0
rt_sigprocmask(SIG_SETMASK, [CHLD], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [CHLD], 8) = 0
rt_sigprocmask(SIG_SETMASK, [CHLD], NULL, 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigaction(SIGINT, {SIG_DFL}, {0x806e2f8, [], 0x4000000}, 8) = 0
stat64(".", {st_mode=S_IFDIR|0750, st_size=1024, ...}) = 0
stat64("/bin/sleep", {st_mode=S_IFREG|0755, st_size=11132, ...}) = 0
stat64("/bin/sleep", {st_mode=S_IFREG|0755, st_size=11132, ...}) = 0
rt_sigprocmask(SIG_BLOCK, [INT CHLD], [], 8) = 0
fork() = 9689
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [CHLD], 8) = 0
rt_sigprocmask(SIG_SETMASK, [CHLD], NULL, 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigaction(SIGINT, {0x806e2f8, [], 0x4000000}, {SIG_DFL}, 8) = 0
wait4(-1, [WIFEXITED(s) && WEXITSTATUS(s) == 0], 0, NULL) = 9689
rt_sigprocmask(SIG_BLOCK, [CHLD TTOU], [CHLD], 8) = 0
rt_sigprocmask(SIG_SETMASK, [CHLD], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [CHLD], 8) = 0
rt_sigprocmask(SIG_SETMASK, [CHLD], NULL, 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
--- SIGCHLD (Child exited) ---

I tried to recompile the kernel without any chroot restrictions but i got the same error message. Any idea ? Spender save me :)

is squid working properly? grsecurity isn't sending it that signal. It's simply logging it. Signal 6 is sigabrt, which is something the program itself would generate.

-Brad

Okay i solved the problem, u was right it wasn't a grsec related problem Squid had to generate its cache dirs under the chrooted enviroment, after I ran 'chroot /var/chroot/squid/ /usr/sbin/squid -z' everything is okay Sorry for bothering u with this non-grsec related problem