Re: [MERGE] Use libcap instead of direct linux capability syscalls

2009-10-23 Thread Alexander Huemer
Amos Jeffries wrote:
 On Tue, 20 Oct 2009 01:04:26 +0200, Henrik Nordstrom
 hen...@henriknordstrom.net wrote:
   
 mån 2009-10-19 klockan 12:10 +1300 skrev Amos Jeffries:

 
 Um, is that function libcap2 specific?
   
 Not sure when it was added. Checking... seems to be 2.09. Added to the
 git repository Sat Mar 29 21:40:06 2008 -0700.

 There is also a libcap-ng project these days, with yet another API..
 

 The other was mentioned as a possible requirement as well. I have not
 spent any time seeing whether its worth it or not to support libcap-ng. Do
 you know enough about them both to pick?

   
 It may be related to the LIBCAP_BROKEN identifier or another such test 
 for the specific function may be worth adding...
   
 I rather have one code base than two here.. either libcap is used or it
 is not. Using libcap if found working or raw syscalls if not does not
 sound like a good idea to me.

 But maybe we can require a reasonably current libcap-2 for TPROXY
 support? It requires a custom kernel anyway on the systems with too old
 libcap implementations I think.
 

 We can do that yes. I think I would also rather do it too. It paves the
 way for a clean deprecation cycle now that TPROXYv4 kernels are effectively
 mainstream:

  3.0: (2008-2010) TPROXYv2 with libcap + libcap2
  3.1: (2010-2012) support TPROXYv2 + TPROXYv4 with libcap2
  3.2: (2011?) support TPROXYv4 with libcap2

 Amos

   
i guess this fix went into squid 3.1.0.14 ... ?
the gentoo package for that version just appeared in the portage tree
and i installed it.
no more warning messages in dmesg. good job!
will this find it's way into squid 3.0 too ?
or can i wait for 3.2 ? i did not find a planned release date.

regards
-alex


Re: [PATCH] warning: `squid' uses 32-bit capabilities

2009-10-06 Thread Alexander Huemer
Bundle Buggy wrote:
 Bundle Buggy has detected this merge request.

 For details, see:
 http://bundlebuggy.aaronbentley.com/project/squid/request/%3C4AC9DC7F.7030304%40treenet.co.nz%3E

 Project: Squid
what exactly does this email mean ?
the linked site is not reachable. (503 Service Temporarily Unavailable).


introduction

2009-10-05 Thread Alexander Huemer
hi,

i am interested in a patch to prevent squid from causing kernel warnings
like this:

warning: `squid' uses 32-bit capabilities (legacy support in use)

a workaround/solution is already discussed here on the mailing list.

regards
-alex


Re: [PATCH] warning: `squid' uses 32-bit capabilities

2009-10-05 Thread Alexander Huemer
actually the patch you wrote does not work for me.
i tried it with squid-3.1.0.13, since the patch seemed to belong to
squid-3.1, not squid-3.0.

# /etc/init.d/squid start
* Starting squid...
2009/10/06 00:26:05| WARNING: -D command-line option is obsolete.
*** glibc detected *** /usr/sbin/squid: free(): invalid next size
(fast): 0x083ec238 ***
=== Backtrace: =
/lib/libc.so.6[0xb7c0e091]
/lib/libc.so.6[0xb7c0f792]
/lib/libc.so.6(cfree+0x6d)[0xb7c1284d]
/usr/sbin/squid[0x818023e]
=== Memory map: 
08048000-0825e000 r-xp  08:01 8807345/usr/sbin/squid
0825e000-08261000 r--p 00215000 08:01 8807345/usr/sbin/squid
08261000-08263000 rw-p 00218000 08:01 8807345/usr/sbin/squid
08263000-083fd000 rw-p  00:00 0  [heap]
b7a0-b7a21000 rw-p  00:00 0
b7a21000-b7b0 ---p  00:00 0
b7b41000-b7b4a000 r-xp  08:01 29728532  
/lib/libnss_nis-2.10.1.so
b7b4a000-b7b4b000 r--p 8000 08:01 29728532  
/lib/libnss_nis-2.10.1.so
b7b4b000-b7b4c000 rw-p 9000 08:01 29728532  
/lib/libnss_nis-2.10.1.so
b7b4c000-b7b52000 r-xp  08:01 29728535  
/lib/libnss_compat-2.10.1.so
b7b52000-b7b53000 r--p 5000 08:01 29728535  
/lib/libnss_compat-2.10.1.so
b7b53000-b7b54000 rw-p 6000 08:01 29728535  
/lib/libnss_compat-2.10.1.so
b7b54000-b7b5e000 r-xp  08:01 29728521  
/lib/libnss_files-2.10.1.so
b7b5e000-b7b5f000 r--p 9000 08:01 29728521  
/lib/libnss_files-2.10.1.so
b7b5f000-b7b6 rw-p a000 08:01 29728521  
/lib/libnss_files-2.10.1.so
b7b6-b7ba3000 rw-p  00:00 0
b7ba3000-b7ce1000 r-xp  08:01 29728539   /lib/libc-2.10.1.so
b7ce1000-b7ce3000 r--p 0013e000 08:01 29728539   /lib/libc-2.10.1.so
b7ce3000-b7ce4000 rw-p 0014 08:01 29728539   /lib/libc-2.10.1.so
b7ce4000-b7ce7000 rw-p  00:00 0
b7ce7000-b7d03000 r-xp  08:01 34303998  
/usr/lib/gcc/i686-pc-linux-gnu/4.4.1/libgcc_s.so.1
b7d03000-b7d04000 r--p 0001c000 08:01 34303998  
/usr/lib/gcc/i686-pc-linux-gnu/4.4.1/libgcc_s.so.1
b7d04000-b7d05000 rw-p 0001d000 08:01 34303998  
/usr/lib/gcc/i686-pc-linux-gnu/4.4.1/libgcc_s.so.1
b7d05000-b7d06000 rw-p  00:00 0
b7d06000-b7d2a000 r-xp  08:01 29714603   /lib/libm-2.10.1.so
b7d2a000-b7d2b000 r--p 00023000 08:01 29714603   /lib/libm-2.10.1.so
b7d2b000-b7d2c000 rw-p 00024000 08:01 29714603   /lib/libm-2.10.1.so
b7d2c000-b7e0f000 r-xp  08:01 34303988  
/usr/lib/gcc/i686-pc-linux-gnu/4.4.1/libstdc++.so.6.0.12
b7e0f000-b7e13000 r--p 000e3000 08:01 34303988  
/usr/lib/gcc/i686-pc-linux-gnu/4.4.1/libstdc++.so.6.0.12
b7e13000-b7e14000 rw-p 000e7000 08:01 34303988  
/usr/lib/gcc/i686-pc-linux-gnu/4.4.1/libstdc++.so.6.0.12
b7e14000-b7e1b000 rw-p  00:00 0
b7e1b000-b7e1d000 r-xp  08:01 29714649   /lib/libdl-2.10.1.so
b7e1d000-b7e1e000 r--p 1000 08:01 29714649   /lib/libdl-2.10.1.so
b7e1e000-b7e1f000 rw-p 2000 08:01 29714649   /lib/libdl-2.10.1.so
b7e1f000-b7e32000 r-xp  08:01 29728529   /lib/libnsl-2.10.1.so
b7e32000-b7e33000 r--p 00012000 08:01 29728529   /lib/libnsl-2.10.1.so
b7e33000-b7e34000 rw-p 00013000 08:01 29728529   /lib/libnsl-2.10.1.so
b7e34000-b7e36000 rw-p  00:00 0
b7e36000-b7e46000 r-xp  08:01 29728517  
/lib/libresolv-2.10.1.so
b7e46000-b7e47000 r--p 0001 08:01 29728517  
/lib/libresolv-2.10.1.so
b7e47000-b7e48000 rw-p 00011000 08:01 29728517  
/lib/libresolv-2.10.1.so
b7e48000-b7e4b000 rw-p  00:00 0
b7e4b000-b7f82000 r-xp  08:01 60595851  
/usr/lib/libcrypto.so.0.9.8
b7f82000-b7f83000 ---p 00137000 08:01 60595851  
/usr/lib/libcrypto.so.0.9.8
b7f83000-b7f8b000 r--p 00137000 08:01 60595851  
/usr/lib/libcrypto.so.0.9.8
b7f8b000-b7f99000 rw-p 0013f000 08:01 60595851  
/usr/lib/libcrypto.so.0.9.8
b7f99000-b7f9c000 rw-p  00:00 0
b7f9c000-b7fdf000 r-xp  08:01 60600670  
/usr/lib/libssl.so.0.9.8
b7fdf000-b7fe r--p 00043000 08:01 60600670  
/usr/lib/libssl.so.0.9.8
b7fe-b7fe3000 rw-p 00044000 08:01 60600670  
/usr/lib/libssl.so.0.9.8
b7fe3000-b7ff5000 r-xp  08:01 8396889/lib/libz.so.1.2.3
b7ff5000-b7ff6000 r--p 00011000 08:01 8396889/lib/libz.so.1.2.3
b7ff6000-b7ff7000 rw-p 00012000 08:01 8396889/lib/libz.so.1.2.3
b7ff7000-b7ff8000 r-xp  08:01 29498493  
/usr/lib/libmd5.so.0.1.0
b7ff8000-b7ff9000 r--p 1000 08:01 29498493  
/usr/lib/libmd5.so.0.1.0
b7ff9000-b7ffa000 rw-p 2000 08:01 29498493  
/usr/lib/libmd5.so.0.1.0
b7ffa000-b8003000 r-xp  08:01 29728476   /lib/libcrypt-2.10.1.so
b8003000-b8004000 r--p 8000 08:01 29728476   /lib/libcrypt-2.10.1.so