[Bug 394350] Re: RLimitCPU has no effect in Apache

2011-04-29 Thread Serge Hallyn
** Changed in: apache2 (Ubuntu) Status: Confirmed => Triaged ** Changed in: apr (Ubuntu) Status: Confirmed => Invalid -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to apache2 in Ubuntu. https://bugs.launchpad.net/bugs/3943

[Bug 394350] Re: RLimitCPU has no effect in Apache

2011-04-29 Thread Serge Hallyn
The debian sid package also ifdefs them out, so if limits are working on debian it must be because they are configured to use mod_cgi and not mod_cgid? -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to apache2 in Ubuntu. https://bugs.laun

[Bug 394350] Re: RLimitCPU has no effect in Apache

2011-04-29 Thread Serge Hallyn
At last, here we go. The file /root/apache2-2.2.17/modules/generators/mod_cgi.c has hooks to set rlimits on spawned off instances. However, test.cgi is being executed by /root/apache2-2.2.17/modules/generators/mod_cgid.c. It has those hooks, but they are #ifdef'd out. -- You received this bug

[Bug 394350] Re: RLimitCPU has no effect in Apache

2011-04-28 Thread Serge Hallyn
The actual setrlimit is done by apr. Apache source ships with its own coyp of the apr source under srclib, but that does not get compiled (or used). Apache definately sees the RLimit_CPU configuration and sets internal variables accordingly. I've yet to instrument the libapr1-dev code itself to

[Bug 394350] Re: RLimitCPU has no effect in Apache

2011-04-27 Thread Serge Hallyn
verified under natty as well -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to apache2 in Ubuntu. https://bugs.launchpad.net/bugs/394350 Title: RLimitCPU has no effect in Apache -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@l

[Bug 394350] Re: RLimitCPU has no effect in Apache

2011-04-27 Thread Serge Hallyn
strace -f -o/tmp/output /etc/init.d/apache2 start followed by triggering the script - nowhere in /tmp/output does RLIMIT_CPU get set. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to apache2 in Ubuntu. https://bugs.launchpad.net/bugs/39

[Bug 394350] Re: RLimitCPU has no effect in Apache

2011-04-27 Thread Serge Hallyn
Odd that others are having trouble reproducing. It reproduces for me on a hardy uec image. /proc/$$/limits for the test.cgi process shows unlimited for cpu, and the script is never killed. ** Changed in: apache2 (Ubuntu) Status: New => Confirmed -- You received this bug notification bec

[Bug 394350] Re: RLimitCPU has no effect in Apache

2011-04-27 Thread Serge Hallyn
** Changed in: apache2 (Ubuntu) Importance: Undecided => Medium -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to apache2 in Ubuntu. https://bugs.launchpad.net/bugs/394350 Title: RLimitCPU has no effect in Apache -- Ubuntu-server-

[Bug 394350] Re: RLimitCPU has no effect in Apache

2011-04-27 Thread Jamie Strandboge
** Changed in: apache2 (Ubuntu) Status: Incomplete => New -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to apache2 in Ubuntu. https://bugs.launchpad.net/bugs/394350 Title: RLimitCPU has no effect in Apache -- Ubuntu-server-bu

[Bug 394350] Re: RLimitCPU has no effect in Apache

2011-03-27 Thread Neil Van Dyke
I was asked privately whether I found a solution. We wasted too much time trying to convince people that we had a credible problem report, and then it seemed that no one was prepared to actually do anything with the information. After that time waste, we decided to give up on RLimitCPU on Ubuntu,

[Bug 394350] Re: RLimitCPU has no effect in Apache

2011-03-26 Thread Jeroen Ooms
I am experiencing exactly the same problem as reported by Neal in 2009. I am running the latest Apache2 from Ubuntu 10.10 repository. RLimitCPU does not kill any of my processes. ** Changed in: apache2 (Ubuntu) Status: Invalid => Incomplete -- You received this bug notification because yo

[Bug 394350] Re: RLimitCPU has no effect in Apache

2009-07-15 Thread Neil Van Dyke
Here is the virtual host config from the procedure documented in: https://bugs.launchpad.net/ubuntu/+source/apache2/+bug/394350/comments/15 It is file: /etc/apache2/sites-available/default ** Attachment added: "default" http://launchpadlibrarian.net/29096236/default -- RLimitCPU has no effe

Re: [Bug 394350] Re: RLimitCPU has no effect in Apache

2009-07-14 Thread Kees Cook
Can you attach the virtual host config that you are seeing the issue with? -- RLimitCPU has no effect in Apache https://bugs.launchpad.net/bugs/394350 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to apache2 in ubuntu. -- Ubuntu-server-bu

[Bug 394350] Re: RLimitCPU has no effect in Apache

2009-07-10 Thread Neil Van Dyke
I have just reproduced the problem with a fresh install with latest updates, and kept a detailed log as I did so. Perhaps someone can spot something I am doing wrong? I would assume that I'm doing something wrong, except comparable things work on Debian and with upstream, and my users also experi

[Bug 394350] Re: RLimitCPU has no effect in Apache

2009-07-09 Thread Kees Cook
I have re-tested on i386 hardy and got the same results as ajmitch: the test program was correctly killed. Neil, if you can post steps to reproduce, I would be very thankful. Sorry it's not any easy problem to uncover. :( -- RLimitCPU has no effect in Apache https://bugs.launchpad.net/bugs/394

[Bug 394350] Re: RLimitCPU has no effect in Apache

2009-07-08 Thread Neil Van Dyke
I appreciate the attempts Ubuntu people have made to reproduce the problem, and I'm baffled that myself and my users are still easily reproducing the problem. I once again reproduced the problem on one of my Ubuntu configurations, and observed through "/proc//limits" that the limits are "unlimited

Re: [Bug 394350] Re: RLimitCPU has no effect in Apache

2009-07-07 Thread Kees Cook
Can you show that your CPU time (ps auwwx | grep test.cgi) is exceeding the limits set (or lack of set limit) for the process that Apache spawns (cat /proc/$(pidof test.cgi)/limits)? -- RLimitCPU has no effect in Apache https://bugs.launchpad.net/bugs/394350 You received this bug notification bec

[Bug 394350] Re: RLimitCPU has no effect in Apache

2009-07-07 Thread Andrew Mitchell
I've tested this on hardy (i386) with all updates installed. The only difference I can see at a glance is i386 vs amd64 with regards to testing this. I've tested with the same method as Kees, in that /etc/apache2/sites-enabled/000-default has: ServerAdmin webmas...@localhost RLim

[Bug 394350] Re: RLimitCPU has no effect in Apache

2009-07-07 Thread Neil Van Dyke
(I had not seen Kees Cook's failure to reproduce before I posted my last message.) I have just reproduced the problem with a fresh install of 9.04 on an X86 box. (I do not have a fresh 8.04 install at the moment.) I am at a loss to explain why Kees Cook could not reproduce the problem. I wonder

[Bug 394350] Re: RLimitCPU has no effect in Apache

2009-07-07 Thread Neil Van Dyke
* Simply take a fresh Ubuntu 8.04 install (which gets Apache 2.2.8), add "RLimitCPU 2 2" to the "default" Apache site file, drop the script above into the "cgi-bin" dir, and run the CGI. You'll see that the CGI process is *not* killed. * Do the same thing on a Debian "stable" system (which gets A

[Bug 394350] Re: RLimitCPU has no effect in Apache

2009-07-07 Thread Kees Cook
As an added note, you can examine a process's rlimits via /proc/$pid/limits -- RLimitCPU has no effect in Apache https://bugs.launchpad.net/bugs/394350 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to apache2 in ubuntu. -- Ubuntu-server-b

[Bug 394350] Re: RLimitCPU has no effect in Apache

2009-07-07 Thread Kees Cook
Based on http://httpd.apache.org/docs/2.0/mod/core.html#rlimitcpu I set a 2 second soft and hard limit on the default website /etc/apache2/sites-enabled/000-default: ServerAdmin webmas...@localhost RLimitCPU 2 2 ... I put the example script above into /usr/lib/cgi-bin/test.cgi,

[Bug 394350] Re: RLimitCPU has no effect in Apache

2009-07-07 Thread Kees Cook
What are the specific configurations you're using so that developers can set up a test to reproduce what you're seeing? -- RLimitCPU has no effect in Apache https://bugs.launchpad.net/bugs/394350 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribe

[Bug 394350] Re: RLimitCPU has no effect in Apache

2009-07-07 Thread Kees Cook
this is Ubuntu-specific? ** Changed in: apache2 (Ubuntu) Status: Incomplete => New -- RLimitCPU has no effect in Apache https://bugs.launchpad.net/bugs/394350 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to apache2 in ubuntu. --

[Bug 394350] Re: RLimitCPU has no effect in Apache

2009-07-07 Thread Neil Van Dyke
Why is the status of this still Incomplete? I realize that the holiday weekend here in the US probably interrupted work, but it's now almost a week idling on what appears to be an Ubuntu- specific security/stability problem for Apache servers. I really need to know if Ubuntu has an imminent solut

[Bug 394350] Re: RLimitCPU has no effect in Apache

2009-07-03 Thread Neil Van Dyke
I just verified that Ubuntu's 9.04's packaging of Apache 2.2.11 also exhibits this problem. Looking through the Ubuntu patches to upstream Apache 2.2.8 (where we initially noticed the problem), I haven't yet found an obvious cause. The people who did the packaging or patches on this would be able

Re: [Bug 394350] Re: RLimitCPU has no effect in Apache

2009-07-02 Thread Neil Van Dyke
Chuck Short wrote at 07/02/2009 09:51 AM: > Do you have a script or a cgi that tests this bug? > The following "cgi-bin" script can be used to trigger "RLimitCPU" in a correctly functioning Apache. Setting the limits to 2 seconds of CPU time typically permits around 10 seconds of real time t

[Bug 394350] Re: RLimitCPU has no effect in Apache

2009-07-02 Thread Chuck Short
Do you have a script or a cgi that tests this bug? Thanks chuck ** Changed in: apache2 (Ubuntu) Status: New => Incomplete -- RLimitCPU has no effect in Apache https://bugs.launchpad.net/bugs/394350 You received this bug notification because you are a member of Ubuntu Server Team, which i