Re: runit not collecting zombies

[Alex Efros <powerman@powerman.asdfGroup.com>]

Hi!

On Wed, Sep 12, 2007 at 06:04:02PM +0200, Radek Podgorny wrote:
> Alex, did I get it right you use gentoo? On what architecture? Stable or

Stable x86 (except few ~x86 packages like runit and svlogd), all 32bit.

I use Hardened Gentoo, and one of ideas is it's GrSecurity/PaX patches
introduce that bug - this may explain why a lot of vanilla kernel users
don't see this bug.
Another idea - some of other gentoo-specific kernel patches.
To test this I should stop using GrSecurity/PaX on production servers for
a weeks, and I dislike this idea.

> unstable? I use gentoo on all my machines (stable/unstable mix, x86/amd64
> mix, different kernels, ...) and some machines are OK, others are not.

Yeah, I've one server which don't have this issue. His admin made a
mistake many months ago - he installed too new gcc (which isn't support
hardened patches yet - SSP and PIE), and afraid to disgrade it on
production server. He wait until hardened patches will be released for
that gcc version to come back to hardened land. This is only noticeable
difference between our servers.

> Maybe this is gentoo specific somehow (exotic USE for glibc, wrong
> gcc?...). I'll get the versions from my machines and post it here, could
> you please do the same? Let's find what's common...

My servers and workstation use (unique lines) (all of them have this issue):
  2.6.20-hardened-r6 SMP i686 Intel(R) Core(TM)2 CPU 6600 @ 2.40GHz GenuineIntel
  2.6.20-hardened-r6     i686 Intel(R) Pentium(R) 4 CPU 2.80GHz GenuineIntel
  2.6.20-hardened-r6     i686 Intel(R) Pentium(R) 4 CPU 3.00GHz GenuineIntel
  2.6.20-hardened-r6     i686 AMD Athlon(tm) 64 Processor 3500+ AuthenticAMD
Server without zombie issue use:
  2.6.20-hardened-r6     i686 Intel(R) Celeron(R) CPU 2.00GHz GenuineIntel
Kernel configuration is 100% equal on server without zombies and my P4 servers.

All servers use:
  sys-libs/glibc-2.5-r4
  sys-devel/binutils-2.17

My servers use:
  sys-devel/gcc-3.4.6-r2  (with SSP and PIE)
Server without zombie issue use:
  sys-devel/gcc-4.1.1-r3

I've tried runit from 1.5.0 to 1.7.2 with patches from this maillist on my
servers. Server without this issue work on runit 1.5.0.

USE-flags on all servers are same:
  sys-kernel/hardened-sources-2.6.20-r6
    USE="-build -symlink"
  sys-libs/glibc-2.5-r4
    USE="hardened nls nptl nptlonly -build -debug -glibc-compat20 -glibc-omitfp -multilib -profile (-selinux)"
  sys-devel/binutils-2.17
    USE="nls -multislot -multitarget -test -vanilla"
  sys-devel/gcc-3.4.6-r2
    USE="hardened nls (-altivec) -bootstrap -boundschecking -build -d -doc -fortran -gcj -gtk -ip28 -ip32r10k -multilib -multislot (-n32) (-n64) -nocxx -nopie -nossp -objc -test -vanilla"
  sys-process/runit-1.7.2
    USE="-static"

-- 
			WBR, Alex.