Hello, I have this error message just after starting apache with mod_php-4.4.0-r3 [root@www apache2]$/etc/init.d/apache2 start * Starting apache2 ... [ ok ] [root@www apache2]$ Message from syslogd@www at Mon Sep 19 17:36:38 2005 ... www kernel: grsec: From 86.192.184.141: signal 11 sent to /usr/sbin/apache2[apache2:22548] uid/euid:1001/1001 gid/egid:440/440, parent /usr/sbin/apache2[apache2:11859] uid/euid:0/0 gid/egid:0/0 Message from syslogd@www at Mon Sep 19 17:36:38 2005 ... www kernel: grsec: From 86.192.184.141: signal 11 sent to /usr/sbin/apache2[apache2:22548] uid/euid:1001/1001 gid/egid:440/440, parent /usr/sbin/apache2[apache2:11859] uid/euid:0/0 gid/egid:0/0 [ebuild R ] dev-php/mod_php-4.4.0-r3 -X +apache2 -berkdb +crypt -curl -debug -doc -fdftk -fi rebird -flash -freetds -gd +gd-external -gdbm -gmp -hardenedphp +imap -informix -ipv6 -java +jpeg -kerberos -ldap -mcal +memlimit -mssql +mysql -nls -oci8 -odbc -pam +png -postgres +snmp -spell +ssl -tiff +truetype +xml2 -yaz 0 kB [root@www ~]$emerge info Portage 2.0.51.22-r2 (default-linux/x86/2005.0, gcc-3.3.6, glibc-2.3.5-r1, 2.6.11-hardened-r15 i686) ================================================================= System uname: 2.6.11-hardened-r15 i686 Intel(R) Pentium(R) 4 CPU 2.80GHz Gentoo Base System version 1.6.13 ccache version 2.3 [enabled] dev-lang/python: 2.3.5-r2 sys-apps/sandbox: 1.2.12 sys-devel/autoconf: 2.13, 2.59-r6 sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6 sys-devel/binutils: 2.15.92.0.2-r10 sys-devel/libtool: 1.5.18-r1 virtual/os-headers: 2.4.19-r1, 2.6.11-r2 ACCEPT_KEYWORDS="x86" AUTOCLEAN="yes" CBUILD="i686-pc-linux-gnu" CFLAGS="-O3 -march=pentium4 -funroll-loops -fprefetch-loop-arrays -pipe" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3/share/config /usr/share/config /var/qmail/control" CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d" CXXFLAGS="-O3 -march=pentium4 -funroll-loops -fprefetch-loop-arrays -pipe" DISTDIR="/usr/portage/distfiles" FEATURES="autoconfig buildpkg ccache distlocks sandbox sfperms strict" GENTOO_MIRRORS="ftp://ftp.belnet.be/mirror/rsync.gentoo.org/gentoo/ ftp://ftp.easynet.nl/mirror/gentoo/ http://ftp.snt.utwente.nl/pub/os/linux/gentoo" MAKEOPTS="-j3" PKGDIR="/usr/portage/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" SYNC="rsync://rsync.gentoo.org/gentoo-portage" USE="x86 alsa apache2 apm bash-completion berkdb bitmap-fonts crypt curl eds emboss encode fbcon foomaticdb fortran gd gdbm gif gpm gstreamer imagemagick imap innodb java jpeg libg++ libwww mad maildir mcal memlimit mikmod motif mp3 mysql ncurses ogg pam pdflib perl png python readline sasl sdl slang snmp spell ssl svga tcpd tiff truetype truetype-fonts type1-fonts virus-scan vorbis xml2 xv zlib userland_GNU kernel_linux elibc_glibc" Unset: ASFLAGS, CTARGET, LANG, LC_ALL, LDFLAGS, LINGUAS, PORTDIR_OVERLAY This doesn't occur with php-4.3.1 series. This is problematic due to the apache update. Regards.
Hello, My kernel grsec config : # # Security options # # # Grsecurity # CONFIG_GRKERNSEC=y # CONFIG_GRKERNSEC_LOW is not set # CONFIG_GRKERNSEC_MEDIUM is not set # CONFIG_GRKERNSEC_HIGH is not set CONFIG_GRKERNSEC_CUSTOM=y # # Address Space Protection # CONFIG_GRKERNSEC_KMEM=y CONFIG_GRKERNSEC_IO=y # CONFIG_GRKERNSEC_BIGMEM is not set CONFIG_GRKERNSEC_BRUTE=y CONFIG_GRKERNSEC_HIDESYM=y # # Role Based Access Control Options # CONFIG_GRKERNSEC_ACL_HIDEKERN=y CONFIG_GRKERNSEC_ACL_MAXTRIES=3 CONFIG_GRKERNSEC_ACL_TIMEOUT=30 # # Filesystem Protections # CONFIG_GRKERNSEC_PROC=y CONFIG_GRKERNSEC_PROC_USER=y CONFIG_GRKERNSEC_PROC_ADD=y CONFIG_GRKERNSEC_LINK=y CONFIG_GRKERNSEC_FIFO=y CONFIG_GRKERNSEC_CHROOT=y CONFIG_GRKERNSEC_CHROOT_MOUNT=y CONFIG_GRKERNSEC_CHROOT_DOUBLE=y CONFIG_GRKERNSEC_CHROOT_PIVOT=y CONFIG_GRKERNSEC_CHROOT_CHDIR=y CONFIG_GRKERNSEC_CHROOT_CHMOD=y CONFIG_GRKERNSEC_CHROOT_FCHDIR=y CONFIG_GRKERNSEC_CHROOT_MKNOD=y CONFIG_GRKERNSEC_CHROOT_SHMAT=y CONFIG_GRKERNSEC_CHROOT_UNIX=y CONFIG_GRKERNSEC_CHROOT_FINDTASK=y CONFIG_GRKERNSEC_CHROOT_NICE=y CONFIG_GRKERNSEC_CHROOT_SYSCTL=y CONFIG_GRKERNSEC_CHROOT_CAPS=y # # Kernel Auditing # CONFIG_GRKERNSEC_AUDIT_GROUP=y CONFIG_GRKERNSEC_AUDIT_GID=407 CONFIG_GRKERNSEC_EXECLOG=y CONFIG_GRKERNSEC_RESLOG=y CONFIG_GRKERNSEC_CHROOT_EXECLOG=y CONFIG_GRKERNSEC_AUDIT_CHDIR=y CONFIG_GRKERNSEC_AUDIT_MOUNT=y CONFIG_GRKERNSEC_AUDIT_IPC=y CONFIG_GRKERNSEC_SIGNAL=y CONFIG_GRKERNSEC_FORKFAIL=y CONFIG_GRKERNSEC_TIME=y CONFIG_GRKERNSEC_PROC_IPADDR=y # # Executable Protections # CONFIG_GRKERNSEC_EXECVE=y CONFIG_GRKERNSEC_SHM=y CONFIG_GRKERNSEC_DMESG=y CONFIG_GRKERNSEC_RANDPID=y # CONFIG_GRKERNSEC_TPE is not set # # Network Protections # CONFIG_GRKERNSEC_RANDNET=y CONFIG_GRKERNSEC_RANDSRC=y # CONFIG_GRKERNSEC_SOCKET is not set # # Sysctl support # CONFIG_GRKERNSEC_SYSCTL=y CONFIG_GRKERNSEC_SYSCTL_ON=y # # Logging Options # CONFIG_GRKERNSEC_FLOODTIME=10 CONFIG_GRKERNSEC_FLOODBURST=4 # # PaX # # CONFIG_PAX is not set # CONFIG_KEYS is not set # CONFIG_SECURITY is not set hardened-kernel 2.6.11-r15 # # Kernel hacking # CONFIG_DEBUG_KERNEL=y CONFIG_MAGIC_SYSRQ=y # CONFIG_SCHEDSTATS is not set # CONFIG_DEBUG_SLAB is not set # CONFIG_DEBUG_SPINLOCK is not set # CONFIG_DEBUG_SPINLOCK_SLEEP is not set # CONFIG_DEBUG_KOBJECT is not set # CONFIG_DEBUG_HIGHMEM is not set CONFIG_DEBUG_BUGVERBOSE=y # CONFIG_DEBUG_INFO is not set # CONFIG_DEBUG_FS is not set # CONFIG_FRAME_POINTER is not set CONFIG_EARLY_PRINTK=y CONFIG_DEBUG_STACKOVERFLOW=y # CONFIG_KPROBES is not set # CONFIG_DEBUG_STACK_USAGE is not set # CONFIG_DEBUG_PAGEALLOC is not set CONFIG_4KSTACKS=y CONFIG_X86_FIND_SMP_CONFIG=y CONFIG_X86_MPPARSE=y Regards.
Does normal PHP work? You can test by typing "php -v" in the shell. Also, please try reemerging mod_php and php without the "snmp" USE flag, if it changes things then I have an idea on what your problem exactly is. :) Best regards, CHTEKK.
Hello, MOre informations : [Mon Sep 19 18:07:23 2005] [notice] child pid 10575 exit signal Segmentation fault (11) [Mon Sep 19 18:07:23 2005] [notice] child pid 10576 exit signal Segmentation fault (11) [Mon Sep 19 18:07:24 2005] [notice] child pid 10577 exit signal Segmentation fault (11) [Mon Sep 19 18:07:24 2005] [notice] child pid 10578 exit signal Segmentation fault (11) [Mon Sep 19 18:07:24 2005] [notice] child pid 10579 exit signal Segmentation fault (11) [Mon Sep 19 18:07:24 2005] [notice] child pid 10580 exit signal Segmentation fault (11) [Mon Sep 19 18:07:24 2005] [notice] child pid 10581 exit signal Segmentation fault (11) [Mon Sep 19 18:07:25 2005] [notice] child pid 10582 exit signal Segmentation fault (11) [Mon Sep 19 18:07:26 2005] [notice] child pid 10583 exit signal Segmentation fault (11) [Mon Sep 19 18:07:26 2005] [notice] child pid 10584 exit signal Segmentation fault (11) [Mon Sep 19 18:07:27 2005] [notice] child pid 10585 exit signal Segmentation fault (11) [Mon Sep 19 18:07:27 2005] [notice] child pid 10590 exit signal Segmentation fault (11) [Mon Sep 19 18:07:27 2005] [notice] child pid 10591 exit signal Segmentation fault (11) Regards.
Hello, Yes php -i works. phpinfo() PHP Version => 4.4.0-gentoo-r1 The signal Segmentation fault (11) coming from apache mod_php 4.4.0-r3 without grsec. I test without snmp. Regards.
Hello, The same without snmp : [Mon Sep 19 18:20:35 2005] [notice] child pid 6027 exit signal Segmentation fault (11) [Mon Sep 19 18:20:35 2005] [notice] child pid 6028 exit signal Segmentation fault (11) [Mon Sep 19 18:20:35 2005] [notice] child pid 6029 exit signal Segmentation fault (11) [Mon Sep 19 18:20:36 2005] [notice] child pid 6033 exit signal Segmentation fault (11) [Mon Sep 19 18:20:37 2005] [notice] child pid 6038 exit signal Segmentation fault (11) [Mon Sep 19 18:20:37 2005] [notice] child pid 6039 exit signal Segmentation fault (11) [Mon Sep 19 18:20:37 2005] [notice] child pid 6045 exit signal Segmentation fault (11) [Mon Sep 19 18:20:37 2005] [notice] child pid 6046 exit signal Segmentation fault (11) Regards
OK, I have more informations. If I put -> safe_mode = On into php.ini I have this [Mon Sep 19 18:07:27 2005] [notice] child pid 10591 exit signal Segmentation fault (11) Regards.
Please, attach a backtrace of the segfault and reopen then. See http://www.gentoo.org/doc/en/bugzilla-howto.xml#doc_chap2 if you need help.
