Squid in chroot got signal 6 when i start the daemon

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

Squid in chroot got signal 6 when i start the daemon

Postby Sea-you » Wed Oct 09, 2002 11:24 am

Hi im using 2.4.19 with grsec-1.9.7 i chrooted squid (im paranoid), and when im trying to start it i get this error:

Oct 9 16:46:37 obelix kernel: grsec: signal 6 sent to (squid:15229) UID(0) EUID(13), parent (squid:25693) UID(0) EUID(0)

I straced the startup script, and it seems to be that the daemon start fine, but after a short period of time the child exits:

wait4(-1, [WIFEXITED(s) && WEXITSTATUS(s) == 0], WNOHANG, NULL) = 12525
wait4(-1, 0x5c1712e8, WNOHANG, NULL) = -1 ECHILD (No child processes)
sigreturn() = ? (mask now [])
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigaction(SIGINT, {0x806e2f8, [], 0x4000000}, {SIG_DFL}, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD TTOU], [CHLD], 8) = 0
rt_sigprocmask(SIG_SETMASK, [CHLD], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [CHLD], 8) = 0
rt_sigprocmask(SIG_SETMASK, [CHLD], NULL, 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigaction(SIGINT, {SIG_DFL}, {0x806e2f8, [], 0x4000000}, 8) = 0
stat64(".", {st_mode=S_IFDIR|0750, st_size=1024, ...}) = 0
stat64("/bin/sleep", {st_mode=S_IFREG|0755, st_size=11132, ...}) = 0
stat64("/bin/sleep", {st_mode=S_IFREG|0755, st_size=11132, ...}) = 0
rt_sigprocmask(SIG_BLOCK, [INT CHLD], [], 8) = 0
fork() = 9689
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [CHLD], 8) = 0
rt_sigprocmask(SIG_SETMASK, [CHLD], NULL, 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigaction(SIGINT, {0x806e2f8, [], 0x4000000}, {SIG_DFL}, 8) = 0
wait4(-1, [WIFEXITED(s) && WEXITSTATUS(s) == 0], 0, NULL) = 9689
rt_sigprocmask(SIG_BLOCK, [CHLD TTOU], [CHLD], 8) = 0
rt_sigprocmask(SIG_SETMASK, [CHLD], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [CHLD], 8) = 0
rt_sigprocmask(SIG_SETMASK, [CHLD], NULL, 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
--- SIGCHLD (Child exited) ---

I tried to recompile the kernel without any chroot restrictions but i got the same error message. Any idea ? Spender save me :)
Sea-you
 
Posts: 10
Joined: Thu Apr 11, 2002 12:48 pm

Postby spender » Wed Oct 09, 2002 1:11 pm

is squid working properly? grsecurity isn't sending it that signal. It's simply logging it. Signal 6 is sigabrt, which is something the program itself would generate.

-Brad
spender
 
Posts: 2185
Joined: Wed Feb 20, 2002 8:00 pm

kkk :)

Postby Sea-you » Wed Oct 09, 2002 2:54 pm

Okay i solved the problem, u was right it wasn't a grsec related problem :) Squid had to generate its cache dirs under the chrooted enviroment, after I ran 'chroot /var/chroot/squid/ /usr/sbin/squid -z' everything is okay :) Sorry for bothering u with this non-grsec related problem :)
Sea-you
 
Posts: 10
Joined: Thu Apr 11, 2002 12:48 pm


Return to grsecurity support

cron