[Varnish] #1521: Varnish 4 VCL compilation failed on OSX x86_64

Varnish varnish-bugs at varnish-cache.org
Mon Jul 28 11:09:03 CEST 2014


#1521: Varnish 4 VCL compilation failed on OSX x86_64
----------------------+----------------------------------------
 Reporter:  yoloseem  |       Owner:  Poul-Henning Kamp <phk@…>
     Type:  defect    |      Status:  closed
 Priority:  normal    |   Milestone:
Component:  build     |     Version:  4.0.0
 Severity:  normal    |  Resolution:  fixed
 Keywords:            |
----------------------+----------------------------------------
Changes (by Poul-Henning Kamp <phk@…>):

 * owner:   => Poul-Henning Kamp <phk@…>
 * status:  needinfo => closed
 * resolution:   => fixed


Comment:

 In [ad6bf9c0e51954cc45fee92d484e95c666d99685]:
 {{{
 #!CommitTicketReference repository=""
 revision="ad6bf9c0e51954cc45fee92d484e95c666d99685"
 Varnishd needs to run the systems C-compiler to compile the VCL code.

 For security reasons, we run the C-compiler in a sandbox process
 which by default uses the same (non-)privileges as the other sandboxes
 (VCL compiler, test-loader process and the worker process).

 On some systems access to the C-compiler is limited, also for reasons
 of security, and varnishd will fail to compile VCL code, unless all
 the sandboxes are given access to the C-compiler.

 Add a new parameter "group_cc" which adds a single gid to the grouplist
 of the sandbox which executes the cc_command, for the benefit of such
 systems.

 Do some slightly related polishing of the docs/help-texts in this area
 while here anyway.

 Fixes #1521
 }}}

-- 
Ticket URL: <https://www.varnish-cache.org/trac/ticket/1521#comment:7>
Varnish <https://varnish-cache.org/>
The Varnish HTTP Accelerator



More information about the varnish-bugs mailing list