Attachment 859670 Details for Bug 1061733 – Suggested fix

Suggested fix

0001-varnishd-Varnish-kills-its-children-when-they-do-not.patch (text/plain), 1.19 KB, created by Lubomir Rintel on 2014-02-05 14:07:27 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Lubomir Rintel

Created: 2014-02-05 14:07:27 UTC

Size: 1.19 KB

patch

obsolete

>From 918c60762bacc0304dd627475c6c4594b1488769 Mon Sep 17 00:00:00 2001
>From: Lubomir Rintel <lkundrak@v3.sk>
>Date: Wed, 5 Feb 2014 15:01:43 +0100
>Subject: [PATCH] varnishd: Varnish kills its children when they do not respond
>
>Varnish log:
>
>varnishd[24821]: Child (24824) not responding to CLI, killing it. severity=err
>
>...proceeds with the fix applied:
>
>varnishd[24821]: Child (24824) died signal=3 severity=info
>varnishd[24821]: Child cleanup complete severity=debug
>
>Reported-by: Stepan Surovec <stepan.surovec@gooddata.com>
>---
> policy/modules/services/varnishd.te | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
>diff --git a/policy/modules/services/varnishd.te b/policy/modules/services/varnishd.te
>index 52d8918..45be1d9 100644
>--- a/policy/modules/services/varnishd.te
>+++ b/policy/modules/services/varnishd.te
>@@ -51,7 +51,7 @@ files_type(varnishlog_log_t)
> # varnishd local policy
> #
> 
>-allow varnishd_t self:capability { dac_override ipc_lock setuid setgid };
>+allow varnishd_t self:capability { dac_override ipc_lock setuid setgid kill };
> dontaudit varnishd_t self:capability sys_tty_config;
> allow varnishd_t self:process signal;
> allow varnishd_t self:fifo_file rw_fifo_file_perms;
>-- 
>1.8.3.1
>

Actions: View

Attachments on bug 1061733: 859670