grsecurity forums

by **bartoszx** » Thu Jan 29, 2004 12:50 pm

I have problem with apache and java
Tehe is lot of log like followin in message

grsec: From 217.96.20.10: signal 11 sent to (java:11366) UID(0) EUID(0), parent (java:9264) UID(0) EUID(0)
grsec: From 217.96.20.10: signal 11 sent to (java:11366) UID(0) EUID(0), parent (java:9264) UID(0) EUID(0)
grsec: From 217.96.20.10: signal 11 sent to (java:11366) UID(0) EUID(0), parent (java:9264) UID(0) EUID(0)

PAX: bytes at PC: <invalid address>.
PAX: From 213.25.255.34: execution attempt in: <NULL>, 00000000-00000000 00000000
PAX: From 213.25.255.34: terminating task: /usr/local/apache/bin/httpd(httpd):2481, uid/euid: 99/99, PC: 0005068e, SP: 5dde051c
PAX: bytes at PC: <invalid address>.
PAX: From 80.50.45.227: execution attempt in: <NULL>, 00000000-00000000 00000000
PAX: From 80.50.45.227: terminating task: /usr/local/apache/bin/httpd(httpd):10382, uid/euid: 99/99, PC: 0005068e, SP: 5dddcc0c
PAX: From 66.196.72.44: execution attempt in: <NULL>, 00000000-00000000 00000000
PAX: From 66.196.72.44: terminating task: /usr/local/apache/bin/httpd(httpd):12302, uid/euid: 99/99, PC: 0005068e, SP: 5dddccbc
PAX: bytes at PC: <invalid address>.
PAX: From 80.51.235.54: execution attempt in: <NULL>, 00000000-00000000 00000000
PAX: From 80.51.235.54: terminating task: /usr/local/apache/bin/httpd(httpd):7919, uid/euid: 99/99, PC: 0005068e, SP: 5dddccbc

by **PaX Team** » Thu Jan 29, 2004 4:59 pm

bartoszx wrote:PAX: bytes at PC: <invalid address>.
PAX: From 213.25.255.34: execution attempt in: <NULL>, 00000000-00000000 00000000
PAX: From 213.25.255.34: terminating task: /usr/local/apache/bin/httpd(httpd):2481, uid/euid: 99/99, PC: 0005068e, SP: 5dde051c

this looks like apache dereferencing an invalid function pointer or something similar, hard to tell the cause without someone debugging it.

by **bartoszx** » Fri Jan 30, 2004 10:17 am

I figured out problem with httpd but still have with java

grsec: From 217.96.20.10: signal 11 sent to (java:11366) UID(0) EUID(0), parent (java:9264) UID(0) EUID(0)
grsec: From 217.96.20.10: signal 11 sent to (java:11366) UID(0) EUID(0), parent (java:9264) UID(0) EUID(0)
grsec: From 217.96.20.10: signal 11 sent to (java:11366) UID(0) EUID(0), parent (java:9264) UID(0) EUID(0)

by **kamihacker** » Thu Feb 26, 2004 6:00 am

bartoszx wrote:I figured out problem with httpd but still have with java

may I know how did you solve the problem with httpd?

regards

by **cmouse** » Mon Mar 01, 2004 6:10 pm

You need to disable PAGING BASED and SEGMENTATION BASED protections for all java binaries. This worked for me.

grsecurity forums

PAX apache java

PAX apache java

Re: PAX apache java