Bug 1099970 - squid rpm package misses /var/run/squid needed for smp mode
Summary: squid rpm package misses /var/run/squid needed for smp mode
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: squid
Version: 20
Hardware: x86_64
OS: Linux
unspecified
high
Target Milestone: ---
Assignee: Michal Luscon
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2014-05-21 16:33 UTC by Fernando Lozano
Modified: 2014-06-13 22:50 UTC (History)
5 users (show)

Fixed In Version: squid-3.3.12-2.fc20
Clone Of:
Environment:
Last Closed: 2014-06-13 22:50:13 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Bugzilla 1099543 0 unspecified CLOSED SELinux prevents squid runing in SMP mode 2021-02-22 00:41:40 UTC

Internal Links: 1099543

Description Fernando Lozano 2014-05-21 16:33:12 UTC
Description of problem:
When squid is configured to run in SMP mode, it needs to create socket files on /var/run/squid. This directory must exist and be writable to the squid service user.

Version-Release number of selected component (if applicable):
3.3.x/3.4.x
Tested with squid-3.3.12-1.fc19.x86_64 but it looks the same problem should happen with the latest f20 package.
Also tested with squid-3.4.3 using unofficial packages from squid-cache.org under centos 6.5.

How reproducible:
Allways

Steps to Reproduce:
1. Configure squid to run in SMP mode. Add to /etc/squid/squid.conf
workers 2
2. Start squid. You'll see errors such as
2014/05/21 12:12:52 kid1| commBind: Cannot bind socket FD 13 to [::]: (13) Permission denied
    on /var/log/squid/cache.og

Actual results:
Squid does not accept http requests, does not liste in port 3128

Expected results:
Squid accepts http requests and fetches the requested urls

Additional info:
I solved the problem creating /var/run/squid, changing group to "squid" and enabling write access to the file group.

This is not enough to make squid run in SMP mode. There are still SELinux AVCs, I opened bug #1099543 for those.

Comment 1 Fedora Update System 2014-05-26 11:55:57 UTC
squid-3.3.12-2.fc20 has been submitted as an update for Fedora 20.
https://admin.fedoraproject.org/updates/squid-3.3.12-2.fc20

Comment 2 Fedora Update System 2014-05-26 23:59:10 UTC
Package squid-3.3.12-2.fc20:
* should fix your issue,
* was pushed to the Fedora 20 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing squid-3.3.12-2.fc20'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2014-6731/squid-3.3.12-2.fc20
then log in and leave karma (feedback).

Comment 3 Fedora Update System 2014-06-13 22:50:13 UTC
squid-3.3.12-2.fc20 has been pushed to the Fedora 20 stable repository.  If problems still persist, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.