Re: Re: nginx worker crashes, grsec denial

John Tate <[email protected]>
Newsgroups gmane.linux.gentoo.hardened
Message-ID <CAHnfuAuOp3Q6SVNewOuyOaZMs6KeyObvAYNkxghWbbGcpCcrhw@mail.gmail.com>
On Mon, Oct 27, 2014 at 11:19 PM, Anthony G. Basile
<[email protected]> wrote:
> On 10/23/14 09:35, John Tate wrote:
>>
>> I just realized this error is because of the attempt to dump core. It
>> is not why nginx is crashing.
>>
>> Sorry.
>>
>
> "RLIMIT_CORE against limit 0" is just grsec telling you that nginx tried to
> dump core bigger than size 0 bytes.  You can use ulimit to get that core if
> you like.  But even if the kernel were killing it, this is a problem in
> nginx.  Most problem where the hardened kernel prevents stuff from happening
> is an issue with the app itself.  Convincing upstream to fix their clever
> feature is the hard part. eg. JIT code in python and libffi and cffi, etc.

Thanks, though I worked that out. I migrated the system from
VirtualBox to Xen and thought the only thing that had to be changed
was the kernel. It turns out that nginx itself needed to be rebuilt
for this system. I asked for help prematurely having assumed the
problem was out of my league.

>
> --
> Anthony G. Basile, Ph. D.
> Chair of Information Technology
> D'Youville College
> Buffalo, NY 14201
> (716) 829-8197
>



-- 
www.johntate.org
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.