GRSEC and Varnish

Bernardf FRIT bernard at frit.net
Tue Feb 2 16:44:48 CET 2010


Hi,

I'am running :
- varnishd (varnish-2.0.4)
- linux kernel 2.6.27.10-grsec-xxxx-grs-ipv4-64

and it appears that the grsec Kernel repeatedly and unexpectedly sends 
signal 11 to the varnishd child.

.../...
Feb  2 12:01:02 XXXXXX varnishd[17111]: segfault at 1000 ip 
000000000043abf0 sp 0000000047d89ae0 error 4 in varnishd[400000+50000]
Feb  2 12:01:02 XXXXXX grsec: From 82.67.39.69: signal 11 sent to 
/usr/sbin/varnishd[varnishd:17111] uid/euid:65534/65534 
gid/egid:65534/65534, parent
 /usr/sbin/varnishd[varnishd:28927] uid/euid:0/0 gid/egid:0/0
Feb  2 13:45:44 XXXXXX varnishd[22187]: segfault at f5000 ip 
000000000043abf0 sp 0000000048538ae0 error 4 in varnishd[400000+50000]
Feb  2 13:45:44 XXXXXX grsec: From 80.13.19.228: signal 11 sent to 
/usr/sbin/varnishd[varnishd:22187] uid/euid:65534/65534 
gid/egid:65534/65534, paren
t /usr/sbin/varnishd[varnishd:28927] uid/euid:0/0 gid/egid:0/0
Feb  2 13:54:57 XXXXXX varnishd[22236]: segfault at 1000 ip 
000000000043abf0 sp 0000000045445ae0 error 4 in varnishd[400000+50000]
Feb  2 13:54:57 XXXXXX grsec: From 80.13.19.228: signal 11 sent to 
/usr/sbin/varnishd[varnishd:22236] uid/euid:65534/65534 
gid/egid:65534/65534, paren
t /usr/sbin/varnishd[varnishd:28927] uid/euid:0/0 gid/egid:0/0
Feb  2 14:13:41 XXXXXX varnishd[22595]: segfault at ae000 ip 
000000000043abf0 sp 0000000040ff4ae0 error 4 in varnishd[400000+50000]
Feb  2 14:13:41 XXXXXX grsec: From 83.145.80.130: signal 11 sent to 
/usr/sbin/varnishd[varnishd:22595] uid/euid:65534/65534 
gid/egid:65534/65534, pare
nt /usr/sbin/varnishd[varnishd:28927] uid/euid:0/0 gid/egid:0/0
Feb  2 14:31:08 XXXXXX varnishd[23547]: segfault at 1000 ip 
000000000043abf0 sp 0000000045b40ae0 error 4 in varnishd[400000+50000]
Feb  2 14:31:08 XXXXXX grsec: From 81.49.118.48: signal 11 sent to 
/usr/sbin/varnishd[varnishd:23547] uid/euid:65534/65534 
gid/egid:65534/65534, paren
t /usr/sbin/varnishd[varnishd:28927] uid/euid:0/0 gid/egid:0/0
Feb  2 16:19:05 XXXXXX varnishd[24256]: segfault at f7000 ip 
000000000043abf0 sp 00000000473bcae0 error 4 in varnishd[400000+50000]
Feb  2 16:19:05 XXXXXX grsec: From 192.196.142.20: signal 11 sent to 
/usr/sbin/varnishd[varnishd:24256] uid/euid:65534/65534 
gid/egid:65534/65534, par
ent /usr/sbin/varnishd[varnishd:28927] uid/euid:0/0 gid/egid:0/0

Then the parent varnishd process starts immediately a new child process 
which lasts some time.

Is there any way to fix this. Remocve the GRSEC kernel ? Upgrade the 
kernel ? Varnish ? or whatever ?

Thanks in advance.
--
Bernard FRIT






More information about the varnish-misc mailing list