Bacula-users

Re: [Bacula-users] Bacula 5.0.3 on EL6

2011-02-25 12:23:47
Subject: Re: [Bacula-users] Bacula 5.0.3 on EL6
From: Josh Fisher <jfisher AT pvct DOT com>
To: Michael Devogelaere <MDeVogelaere AT BaltimoreAircoil DOT be>
Date: Fri, 25 Feb 2011 12:20:37 -0500
Did you build RPMs from the source RPM? EL6 uses a newer version of glibc that has stack and buffer overflow protection mechanisms. I don't know what the status of 5.0.3 is with regards to these glibc mechanisms, but previous versions would fail in like manner when, in particular, the -DFORTIFY_SOURCE flag was set to anything other than zero. Fedora, since version 8, has set -DFORTIFY_SOURCE=2. I have not used EL6, but my guess is that EL6 is doing the same thing as newer versions of Fedora.

In any case, Bacula should be compiled using the compiler flags that are set when Bacula is built from source, rather than from rpmbuild. Either build from the source tarball or else set the proper CFLAGS in the global cflags used by rpmbuild, which is set by the %__global_cflags macro in /usr/lib/rpm/redhat/macros, if you want/need an RPM. You can see what CFLAGS should be by running configure against the source tarball. (FORTIFY_SOURCE will not be defined at all, or will be set to zero.) Then set %__global_cflags accordingly and use rpmbuild to build the RPMs with the proper flags. Note that you will have to restore the %__global_cflags macro to its original state before building any of Redhat's source RPMs, which are designed to have FORTIFY_SOURCE=2.

Again, I'm not certain this is still an issue with building Bacula RPMs on Fedora (or probably EL6), but it is a possible (probable?) cause of this error. If so, then keep in mind that this is not a real buffer overrun, and does NOT mean that Bacula has any buffer overrun vulnerabilities. It is caused by inadvertently turning on a glibc "feature" that Bacula does not have any use for.

On 2/25/2011 4:45 AM, Michael Devogelaere wrote:
Hi,

Is anybody having troubles with running Bacula 5.0.3 filedaemon on (Oracle) Enterprise Linux  6 - 64 bits ?
Yesterday i upgrade one of our servers. I recompiled the filedaemon and now the filedaemon fails almost immediately after starting a backupjob.
I tried with various options: without openssl, static binaries but none of them worked.
I'm getting this error (please note that "backup" is not our bacula director server: that one is still running fine on EL5)

[root@backup ~]# 25-Feb 10:22 backup-fd: ABORTING due to ERROR in smartall.c:215
Buffer overrun called from crypto.c:688
Bacula interrupted by signal 11: Segmentation violation
Kaboom! bacula-fd, backup-fd got signal 11 - Segmentation violation. Attempting traceback.
Kaboom! exepath=/usr/sbin/
Calling: /usr/sbin/btraceback /usr/sbin/bacula-fd 7229 /var/lib/bacula
/usr/sbin/btraceback: line 45: /usr/sbin/bsmtp: No such file or directory
cat: write error: Broken pipe
It looks like the traceback worked ...
Dumping: /var/lib/bacula/backup-fd.7229.bactrace
^C

The traceback:
[root@backup ~]# cat /var/lib/bacula/backup-fd.7229.bactrace
Attempt to dump locks
threadid=0x7f307ffff700 max=0 current=-1
threadid=0x7f3084eeb700 max=1 current=-1
threadid=0x7f30856ec700 max=1 current=-1
threadid=0x7f308f1c37e0 max=0 current=-1
Attempt to dump current JCRs. njcrs=1
threadid=(nil) JobId=21589 JobStatus=R jcr=0x7f3078001078 name=backup.nodomino.2011-02-25_10.22.37_46
threadid=(nil) killable=0 JobId=21589 JobStatus=R jcr=0x7f3078001078 name=backup.nodomino.2011-02-25_10.22.37_46
        use_count=1
        JobType=B JobLevel=I
        sched_time=25-Feb-2011 10:22 start_time=25-Feb-2011 10:22
        end_time=01-Jan-1970 01:00 wait_time=01-Jan-1970 01:00
        db=(nil) db_batch=(nil) batch_started=0
Attempt to dump plugins. Hook count=0

My bacula-fd configuration file:
Director {
  Name = BAC-dir
  Password = "XXXXXXXXXXXXXXXXXXXXXXX"
}

FileDaemon {                      
  Name = backup-fd
  FDport = 9102        
  WorkingDirectory = /var/lib/bacula
  Pid Directory = /var/run
  Maximum Concurrent Jobs = 2
}

Messages {
  Name = Standard
  director = BAC-dir = all, !skipped, !restored
}



Kind regards,
Michaël Devogelaere

______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email
______________________________________________________________________
------------------------------------------------------------------------------ Free Software Download: Index, Search & Analyze Logs and other IT data in Real-Time with Splunk. Collect, index and harness all the fast moving IT data generated by your applications, servers and devices whether physical, virtual or in the cloud. Deliver compliance at lower cost and gain new business insights. http://p.sf.net/sfu/splunk-dev2dev
_______________________________________________ Bacula-users mailing list Bacula-users AT lists.sourceforge DOT net https://lists.sourceforge.net/lists/listinfo/bacula-users
------------------------------------------------------------------------------
Free Software Download: Index, Search & Analyze Logs and other IT data in 
Real-Time with Splunk. Collect, index and harness all the fast moving IT data 
generated by your applications, servers and devices whether physical, virtual
or in the cloud. Deliver compliance at lower cost and gain new business 
insights. http://p.sf.net/sfu/splunk-dev2dev 
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users
<Prev in Thread] Current Thread [Next in Thread>