grsecurity forums

I have problem with apache and java
Tehe is lot of log like followin in message



grsec: From 217.96.20.10: signal 11 sent to (java:11366) UID(0) EUID(0), parent (java:9264) UID(0) EUID(0)
grsec: From 217.96.20.10: signal 11 sent to (java:11366) UID(0) EUID(0), parent (java:9264) UID(0) EUID(0)
grsec: From 217.96.20.10: signal 11 sent to (java:11366) UID(0) EUID(0), parent (java:9264) UID(0) EUID(0)

PAX: bytes at PC: <invalid address>.
PAX: From 213.25.255.34: execution attempt in: <NULL>, 00000000-00000000 00000000
PAX: From 213.25.255.34: terminating task: /usr/local/apache/bin/httpd(httpd):2481, uid/euid: 99/99, PC: 0005068e, SP: 5dde051c
PAX: bytes at PC: <invalid address>.
PAX: From 80.50.45.227: execution attempt in: <NULL>, 00000000-00000000 00000000
PAX: From 80.50.45.227: terminating task: /usr/local/apache/bin/httpd(httpd):10382, uid/euid: 99/99, PC: 0005068e, SP: 5dddcc0c
PAX: From 66.196.72.44: execution attempt in: <NULL>, 00000000-00000000 00000000
PAX: From 66.196.72.44: terminating task: /usr/local/apache/bin/httpd(httpd):12302, uid/euid: 99/99, PC: 0005068e, SP: 5dddccbc
PAX: bytes at PC: <invalid address>.
PAX: From 80.51.235.54: execution attempt in: <NULL>, 00000000-00000000 00000000
PAX: From 80.51.235.54: terminating task: /usr/local/apache/bin/httpd(httpd):7919, uid/euid: 99/99, PC: 0005068e, SP: 5dddccbc

bartoszx wrote:PAX: bytes at PC: <invalid address>.
PAX: From 213.25.255.34: execution attempt in: <NULL>, 00000000-00000000 00000000
PAX: From 213.25.255.34: terminating task: /usr/local/apache/bin/httpd(httpd):2481, uid/euid: 99/99, PC: 0005068e, SP: 5dde051c

this looks like apache dereferencing an invalid function pointer or something similar, hard to tell the cause without someone debugging it.

I figured out problem with httpd but still have with java

grsec: From 217.96.20.10: signal 11 sent to (java:11366) UID(0) EUID(0), parent (java:9264) UID(0) EUID(0)
grsec: From 217.96.20.10: signal 11 sent to (java:11366) UID(0) EUID(0), parent (java:9264) UID(0) EUID(0)
grsec: From 217.96.20.10: signal 11 sent to (java:11366) UID(0) EUID(0), parent (java:9264) UID(0) EUID(0)

bartoszx wrote:I figured out problem with httpd but still have with java

may I know how did you solve the problem with httpd?

regards

You need to disable PAGING BASED and SEGMENTATION BASED protections for all java binaries. This worked for me.