The following reply was made to PR mod_userdir/1524; it has been noted by GNATS.

From: Dean Gaudet <[EMAIL PROTECTED]>
To: Jason Clary <[EMAIL PROTECTED]>
Cc: [EMAIL PROTECTED]
Subject: Re: mod_userdir/1524: access of /~<login> crashes with sigsegv
Date: Sun, 7 Dec 1997 10:32:26 -0800 (PST)

 I think you mean version 1.3b3 not 1.2b3, right?
 
 You won't get a coredump because of a security protection feature which
 prevents programs that ever ran as root from dumping core.  You can patch
 your kernel with
 <ftp://ftp.angmar.org/pub/patches/kernel/kernel-2.0.30-setuid_coredump.diff>
 (it probably patches against 2.0.32, I haven't tried yet).  Or you can try
 running it using
 <http://www.arctic.org/~dgaudet/patches/apache-1.3-listenwrap.patch>. 
 
 arctic is running 1.3b3 on a 2.0.32 system, but not with glibc like redhat
 5, and I'm not getting coredumps on /~login as you can see.  So if you can
 compile the server with -g, and run it on a different port as a non-root
 user and get a coredump... and get us a stack trace that would be
 excellent.
 
 Dean
 
 

Reply via email to