On Tuesday, 17 July 2018 21:12:48 CEST gregor herrmann wrote: > On Tue, 17 Jul 2018 20:54:02 +0200, Stefan Fritsch wrote: > > Can one of you please check how libcap-ng is pulled into the process. > > Something like this should do the trick (replace XXX with the pid of one > > of > > your apache processes, you need to be root to do this) : > > > > pid=XXX; for i in $(awk '{ print $6 }' < /proc/$pid/maps|sort -u|grep /) ; > > do readelf -d $i|grep libcap && echo $i ; done > > # pid=6855; for i in $(awk '{ print $6 }' < /proc/$pid/maps|sort -u|grep /) > ; do readelf -d $i|grep libcap && echo $i ; done readelf: Error: > '/dev/zero' is not an ordinary file > 0x0000000000000001 (NEEDED) Shared library: [libcap-ng.so.0] > /lib/x86_64-linux-gnu/libaudit.so.1.0.0 > 0x000000000000000e (SONAME) Library soname: [libcap-ng.so.0] > /lib/x86_64-linux-gnu/libcap-ng.so.0.0.0 > readelf: Error: '/SYSV6400005e': No such file > readelf: Error: Not an ELF file - it has the wrong magic bytes at the start
Thanks, Gregor. Unfortunately, that is not helpful, yet. Please try again with ldd instead of readelf -d.