Bacula-users

Re: [Bacula-users] Bacula 5.0.3 on EL6

2011-02-27 12:49:31
Subject: Re: [Bacula-users] Bacula 5.0.3 on EL6
From: Michael Devogelaere <MDeVogelaere AT BaltimoreAircoil DOT be>
To: jfisher AT pvct DOT com
Date: Sun, 27 Feb 2011 18:18:54 +0100
Hi Josh,

Yes: i built them from the source rpm.
I have added 'export CFLAGS="-DFORTIFY_SOURCE=2"' right before the %configure statement in the spec file and rebuilt bacula-fd.
Bacula-fd has been running now during the entire weekend without any problem.
Thanks a lot for your suggestion !
 
Kind regards,
Michaël.

>Did you build RPMs from the source RPM? EL6 uses a newer version of glibc that has stack and buffer overflow protection mechanisms. I don't know what the status of 5.0.3 is with >regards to these glibc mechanisms, but previous versions would fail in like manner when, in particular, the -DFORTIFY_SOURCE flag was set to anything other than zero. Fedora, >since version 8, has set -DFORTIFY_SOURCE=2. I have not used EL6, but my guess is that EL6 is doing the same thing as newer versions of Fedora.
>
>In any case, Bacula should be compiled using the compiler flags that are set when Bacula is built from source, rather than from rpmbuild. Either build from the source tarball or else >set the proper CFLAGS in the global cflags used by rpmbuild, which is set by the %__global_cflags macro in /usr/lib/rpm/redhat/macros, if you want/need an RPM. You can see what >CFLAGS should be by running configure against the source tarball. (FORTIFY_SOURCE will not be defined at all, or will be set to zero.) Then set %__global_cflags accordingly and >use rpmbuild to build the RPMs with the proper flags. Note that you will have to restore the %__global_cflags macro to its original state before building any of Redhat's source >RPMs, which are designed to have FORTIFY_SOURCE=2.

>Again, I'm not certain this is still an issue with building Bacula RPMs on Fedora (or probably EL6), but it is a possible (probable?) cause of this error. If so, then keep in mind that >this is not a real buffer overrun, and does NOT mean that Bacula has any buffer overrun vulnerabilities. It is caused by inadvertently turning on a glibc "feature" that Bacula does >not have any use for.

On 2/25/2011 4:45 AM, Michael Devogelaere wrote:
Hi,

Is anybody having troubles with running Bacula 5.0.3 filedaemon on (Oracle) Enterprise Linux  6 - 64 bits ?
Yesterday i upgrade one of our servers. I recompiled the filedaemon and now the filedaemon fails almost immediately after starting a backupjob.
I tried with various options: without openssl, static binaries but none of them worked.
I'm getting this error (please note that "backup" is not our bacula director server: that one is still running fine on EL5)

[root@backup ~]# 25-Feb 10:22 backup-fd: ABORTING due to ERROR in smartall.c:215
Buffer overrun called from crypto.c:688
Bacula interrupted by signal 11: Segmentation violation
Kaboom! bacula-fd, backup-fd got signal 11 - Segmentation violation. Attempting traceback.
Kaboom! exepath=/usr/sbin/
Calling: /usr/sbin/btraceback /usr/sbin/bacula-fd 7229 /var/lib/bacula
/usr/sbin/btraceback: line 45: /usr/sbin/bsmtp: No such file or directory
cat: write error: Broken pipe
It looks like the traceback worked ...
Dumping: /var/lib/bacula/backup-fd.7229.bactrace
^C

The traceback:
[root@backup ~]# cat /var/lib/bacula/backup-fd.7229.bactrace
Attempt to dump locks
threadid=0x7f307ffff700 max=0 current=-1
threadid=0x7f3084eeb700 max=1 current=-1
threadid=0x7f30856ec700 max=1 current=-1
threadid=0x7f308f1c37e0 max=0 current=-1
Attempt to dump current JCRs. njcrs=1
threadid=(nil) JobId=21589 JobStatus=R jcr=0x7f3078001078 name=backup.nodomino.2011-02-25_10.22.37_46
threadid=(nil) killable=0 JobId=21589 JobStatus=R jcr=0x7f3078001078 name=backup.nodomino.2011-02-25_10.22.37_46
        use_count=1
        JobType=B JobLevel=I
        sched_time=25-Feb-2011 10:22 start_time=25-Feb-2011 10:22
        end_time=01-Jan-1970 01:00 wait_time=01-Jan-1970 01:00
        db=(nil) db_batch=(nil) batch_started=0
Attempt to dump plugins. Hook count=0

My bacula-fd configuration file:
Director {
  Name = BAC-dir
  Password = "XXXXXXXXXXXXXXXXXXXXXXX"
}

FileDaemon {                      
  Name = backup-fd
  FDport = 9102        
  WorkingDirectory = /var/lib/bacula
  Pid Directory = /var/run
  Maximum Concurrent Jobs = 2
}

Messages {
  Name = Standard
  director = BAC-dir = all, !skipped, !restored
}



Kind regards,
Michaël Devogelaere

______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email
______________________________________________________________________

------------------------------------------------------------------------------
Free Software Download: Index, Search & Analyze Logs and other IT data in
Real-Time with Splunk. Collect, index and harness all the fast moving IT data
generated by your applications, servers and devices whether physical, virtual
or in the cloud. Deliver compliance at lower cost and gain new business
insights. http://p.sf.net/sfu/splunk-dev2dev 

_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users

______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email
______________________________________________________________________

______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email
______________________________________________________________________
------------------------------------------------------------------------------
Free Software Download: Index, Search & Analyze Logs and other IT data in 
Real-Time with Splunk. Collect, index and harness all the fast moving IT data 
generated by your applications, servers and devices whether physical, virtual
or in the cloud. Deliver compliance at lower cost and gain new business 
insights. http://p.sf.net/sfu/splunk-dev2dev 
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users
<Prev in Thread] Current Thread [Next in Thread>