mod-security-users

[mod-security-users] Apache segfaults with mod_security

[Rob T. <rt...@li...>]

Hi,

I downloaded and build mod_security v1.8.7 as per the INSTALL directions:

cd apache2
apxs -cia mod_security.c
apachectl stop
apachectl start

Apache will not start and gets a segfault.  Unfortunately, I do not have a
more detailed problem description than that.  I'm running apache v2.0.47 on
RedHat AS3.

Any ideas about where to look?

Thanks.

-- 
Rob Tanner
UNIX Services Manager
Linfield College, McMinnville OR

Re: [mod-security-users] Apache segfaults with mod_security

[Ivan R. <iv...@we...>]

Rob Tanner wrote:
> Hi,
> 
> I downloaded and build mod_security v1.8.7 as per the INSTALL directions:
> 
> cd apache2
> apxs -cia mod_security.c
> apachectl stop
> apachectl start
> 
> Apache will not start and gets a segfault.  Unfortunately, I do not have a
> more detailed problem description than that.  I'm running apache v2.0.47 on
> RedHat AS3.
> 
> Any ideas about where to look?

   That's strange. Is there anything in the Apache error log? Do you have
   any of the mod_security configuration directives in httpd.conf?

   You can try doing the following:

   1. Go to where your httpd binary is.
   2. strace ./httpd -X 2> output
   3. Wait until Apache either starts or segfaults
   4. Send the output to me privately

-- 
Ivan Ristic
Apache Security (O'Reilly) - http://www.apachesecurity.net
Open source web application firewall - http://www.modsecurity.org

Re: [mod-security-users] Apache segfaults with mod_security

[Ivan R. <iv...@we...>]

Rob Tanner wrote:
> Hi,
> 
> I downloaded and build mod_security v1.8.7 as per the INSTALL directions:
> 
> cd apache2
> apxs -cia mod_security.c
> apachectl stop
> apachectl start
> 
> Apache will not start and gets a segfault.  Unfortunately, I do not have a
> more detailed problem description than that.  I'm running apache v2.0.47 on
> RedHat AS3.
> 
> Any ideas about where to look?

   Update for the list: we tracked the crash to the APR function
   unixd_set_global_mutex_perms(). My guess is there's a problem in
   an older version of APR. Rob decided to upgrade to the latest
   version of Apache and that solved his problem.

-- 
Ivan Ristic
Apache Security (O'Reilly) - http://www.apachesecurity.net
Open source web application firewall - http://www.modsecurity.org