Hi,

I am trying to chroot the apache server on my Linux box running Debian
Sarge, following the guidelines given in this article :

http://www.securityfocus.com/infocus/1786

I followed all the steps and I could solve most of the problems coming, I
believe, mainly from the fact that this procedure applies on a FreeBSD
server. But now the server does not start and the following error appears
on the error.log:

Input/output error: apr_proc_detach failed Pre-configuration failed

I could understand that the error is coming from the multi-processing
module. It is in fact written in server/mpm/prefork.c, that I used, because
I compiled apache with the "--with-mpm=prefork" option. But I couldn't go
beyond this.

Anybody may give me more hints?
--
---         _   o        |    File reality.sys corrupted, Reboot     |
/ immi   ---  _/\_>      |               Universe? Y/N               |
(_/          -  O,> / O     |                                           |

[ Post a follow-up to this message ]

Some more infos ( I cannot judge if useful or not ). By giving:

strace chroot /chroot/httpd /usr/local/apache2/bin/httpd

the last rows I get are:lstat64("/usr/local/apache2/conf/httpd.conf",
{st_mode=S_IFREG|0644, st_size=2772, ...}) = 0
open("/usr/local/apache2/conf/httpd.conf", O_RDONLY) = 4
fstat64(4, {st_mode=S_IFREG|0644, st_size=2772, ...}) = 0
read(4, "# =============================="..., 4096) = 2772
stat64("/usr/local/apache2", {st_mode=S_IFDIR|0755, st_size=144, ...}) 
= 0
read(4, "", 4096)                       = 0
close(4)                                = 0
chdir("/")                              = 0
fork()                                  = 22854
--- SIGCHLD (Child exited) @ 0 (0) ---
exit_group(0)                           = ?


and with :

ltrace chroot /chroot/httpd /usr/local/apache2/bin/httpd

the last rows are:

apr_proc_detach(1, 0x80ebe88, 0xbffffc78, 0x806380d, 0x80a7790
<unfinished ...>
--- SIGCHLD (Child exited) ---
+++ exited (status 0) +++

Does this means anything ?

--
---         _   o        |     Sembra di sentirlo ancora dire al     |
/ immi   ---  _/\_>      | mercante di liquori: tu che lo vendi cosa |
(_/          -  O,> / O     |        ti compri di migliore? FdA         |

[ Post a follow-up to this message ]

On 2004-08-02, Roberto <jimmi@bglug.it> wrote:
> Some more infos ( I cannot judge if useful or not ). By giving:

I had the same problem unders Solaris, in the end I solved
compiling Apache by hand.

Davide

--
| "Even the best of friends cannot attend each other's funeral."   --
| Kehlog Albran, "The Profit"
|
|

[ Post a follow-up to this message ]

Davide Bianchi wrote:
> I had the same problem unders Solaris, in the end I solved
> compiling Apache by hand.

I DID compiled it by myself 

Thanks comunque, Davide ;)
--
---         _   o        |    File reality.sys corrupted, Reboot     |
/ immi   ---  _/\_>      |               Universe? Y/N               |
(_/          -  O,> / O     |                                           |

[ Post a follow-up to this message ]

Roberto <jimmi@bglug.it> wrote in message news:<jhv4u1-701.ln1@server.jimmi.home>...
> Davide Bianchi wrote: 
>
> I DID compiled it by myself 
>
> Thanks comunque, Davide ;)

We had the same problem, fixed it by making sure the home directory
exists in the jail for apache's user eg (wwwrun, nobody etc..)


http://www.devisland.net

[ Post a follow-up to this message ]

Roberto <jimmi@bglug.it> wrote in message news:<jhv4u1-701.ln1@server.jimmi.home>...
> Davide Bianchi wrote: 
>
> I DID compiled it by myself 
>
> Thanks comunque, Davide ;)

We had the same problem, fixed it by making sure the home directory
exists in the jail for apache's user eg (wwwrun, nobody etc..)


http://www.devisland.net

[ Post a follow-up to this message ]

Wow! I got the solution at the end, thanks to Jan Mattila ;)

http://marc.theaimsgroup.com/?l=apa...04367014264&w=2

The command indicated in the article I read may be suitable for BSD, but not
for Linux.

Thanks to everybody 
--
---         _   o        | If God had intended man to use the metric |
/ immi   ---  _/\_>      |   system, Jesus would have only had ten   |
(_/          -  O,> / O     |                disciples.                 |

[ Post a follow-up to this message ]

quote:
Originally posted by Roberto 
[B]Wow! I got the solution at the end, thanks to Jan Mattila ;)

http://marc.theaimsgroup.com/?l=apa...04367014264&w=2



Looks like a link to the two line post I wrote to the apache-httpd-users lis
t. 

A day or two later I went on to write a full howto about chrooting Apache2, 
which I've tried to keep moderately up to date as newer versions of Apache2 
have been announced. 

The latest version is available at least at this address:

http://www.cs.helsinki.fi/u/janmatt...che2-howto.html

Here's the tinyurl for it:

http://tinyurl.com/norav

--
Jan Mattila

[ Post a follow-up to this message ]