Re: Stuck CLOSED sockets / sshd / zombies...
--DRp5/Sds4nAqvQzf
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Fri, May 09, 2014 at 09:28:29AM +0100, Karl Pielorz wrote:
>=20
> --On 11 April 2014 21:39 +0300 Konstantin Belousov <kostikbel@gmail.com>=
=20
> wrote:
>=20
> > BTW, below is the updated patch with the workaround for sshd issue.
> >
> > diff --git a/secure/usr.sbin/sshd/Makefile b/secure/usr.sbin/sshd/Makef=
ile
> > index 4f730a9..b3231a4 100644
> > --- a/secure/usr.sbin/sshd/Makefile
> > +++ b/secure/usr.sbin/sshd/Makefile
> > @@ -57,6 +57,12 @@ CFLAGS+=3D -DNONE_CIPHER_ENABLED
> > DPADD+=3D ${LIBCRYPT} ${LIBCRYPTO} ${LIBZ}
> > LDADD+=3D -lcrypt -lcrypto -lz
> >
> > +# put the threading library last
> > +.if ${MK_KERBEROS_SUPPORT} !=3D "no"
> > +DPADD+=3D ${LIBPTHREAD}
> > +LDADD+=3D -lpthread
> > +.endif
> > +
> > .if defined(LOCALBASE)
> > CFLAGS+=3D -DXAUTH_PATH=3D\"${LOCALBASE}/bin/xauth\"
> > .endif
>=20
> As far as I can see this hasn't been committed to 10/Stable yet? (or=20
> anywhere?) That means anything we build from 10/Stable is still going to=
=20
> have this issue - where sshd hangs because "libthr wrapper thr_sighandler=
()=20
> for the signal handlers is not installed as the recepient of the kernel=
=20
> signal, which prevents libthr locks for rtld from working properly."
It was committed in r265313 to stable/10, and in r265314 to stable/9,
although the later was not strictly neccessary.
>=20
> This is causing us issues [as well as some other people running other too=
ls=20
> - not fixed by this patch] - I would raise a PR - but it's not my patch! =
:)
>=20
> Thanks,
>=20
> -Karl
> =20
--DRp5/Sds4nAqvQzf
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (FreeBSD)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=Na74
-----END PGP SIGNATURE-----
--DRp5/Sds4nAqvQzf--
討論串 (同標題文章)
完整討論串 (本文為第 49 之 50 篇)：