[mod-security-users] Re: Mutex errors in chroot Apache
Brought to you by:
victorhora,
zimmerletw
|
From: Skye P. <sk...@f4...> - 2006-03-30 09:09:33
|
Investigating the Apache2 source seems to have found the problem. In FreeBSD ports at least, the default APR locking method is APR_USE_FLOCK_SERIALIZE. I'm sure flock() doesn't work well with a chroot() between calls :) I wonder what would happen if the flock fd was pointing at a lockfile inside the chroot jail? The man page doesn't say what happens to open file fds... Looks like mod_security and mod_rewrite are affected at least (both use locking on their log files) Maybe some other default APR locking method (like SysV semaphores) is safe on FreeBSD 6. I recall reading that POSIX semaphores may not be safe with mod_security. Thanks Skye |