grsecurity forums

I used grsecurity-2.2.2-2.6.32.41-201106071941.patch and disabled all protetion on httpd.

Code: Select all

[root@11 ~]# ps aux
apache   15399  0.0  0.5 426744 22696 ?        Dl   10:13   0:00 /usr/sbin/httpd


Code: Select all

[23997.216334] grsec: From 127.0.0.1: Segmentation fault occurred at 000077e6 in /usr/sbin/httpd[httpd:30694] uid/euid:48/48 gid/egid:48/48, parent /usr/sbin/httpd[httpd:13871] uid/euid:0/0 gid/egid:0/0
[25564.021817] grsec: From 127.0.0.1: Segmentation fault occurred at 00001442 in /usr/sbin/httpd[httpd:5186] uid/euid:48/48 gid/egid:48/48, parent /usr/sbin/httpd[httpd:13871] uid/euid:0/0 gid/egid:0/0
[28357.898485] grsec: From 127.0.0.1: Segmentation fault occurred at 0000452a in /usr/sbin/httpd[httpd:17706] uid/euid:48/48 gid/egid:48/48, parent /usr/sbin/httpd[httpd:13871] uid/euid:0/0 gid/egid:0/0
[50843.383590] grsec: From 10.253.3.9: Segmentation fault occurred at 00003890 in /usr/sbin/httpd[httpd:14480] uid/euid:48/48 gid/egid:48/48, parent /usr/sbin/httpd[httpd:22642] uid/euid:0/0 gid/egid:0/0



Code: Select all

[root@11 ~]# paxctl -v /usr/sbin/httpd
PaX control v0.5
Copyright 2004,2005,2006,2007 PaX Team <pageexec@freemail.hu>

- PaX flags: -p-s-m-x-e-r [/usr/sbin/httpd]
   PAGEEXEC is disabled
   SEGMEXEC is disabled
   MPROTECT is disabled
   RANDEXEC is disabled
   EMUTRAMP is disabled
   RANDMMAP is disabled


perlish wrote:I used grsecurity-2.2.2-2.6.32.41-201106071941.patch and disabled all protetion on httpd.

try to attach with gdb to apache and get some information about the crash (bt, info reg, x/8i $pc ,etc). also try a vanilla kernel if you can to see if it's really some kernel induced problem and not something in userland.

PaX Team wrote:

perlish wrote:I used grsecurity-2.2.2-2.6.32.41-201106071941.patch and disabled all protetion on httpd.

try to attach with gdb to apache and get some information about the crash (bt, info reg, x/8i $pc ,etc). also try a vanilla kernel if you can to see if it's really some kernel induced problem and not something in userland.

I've tried use the same kernel but without grsecurity,it worked fine.
I will try to use gdb later.

Thank you.