[Samba] Segfault/panic with Samba 3.0.23d and setuid

[Doug Dimick]

Interesting... I attempted to "su - nobody" and got the same message.
Creating another user and asking Samba to use it instead of nobody works
initially, but then starts failing with the same error. I definitely have
not purposefully modified ulimit or attempted to restrict system resources.

Output of ulimit -a:

core file size          (blocks, -c) 0
data seg size           (kbytes, -d) unlimited
max nice                        (-e) 0
file size               (blocks, -f) unlimited
pending signals                 (-i) unlimited
max locked memory       (kbytes, -l) unlimited
max memory size         (kbytes, -m) unlimited
open files                      (-n) 1024
pipe size            (512 bytes, -p) 8
POSIX message queues     (bytes, -q) unlimited
max rt priority                 (-r) 0
stack size              (kbytes, -s) 8192
cpu time               (seconds, -t) unlimited
max user processes              (-u) unlimited
virtual memory          (kbytes, -v) unlimited
file locks                      (-x) unlimited

	-d



-----Original Message-----
From: Volker Lendecke [mailto:vlendec at sernet.de] On Behalf Of Volker
Lendecke
Sent: Tuesday, January 23, 2007 12:22 PM
To: Doug Dimick
Cc: samba-technical at samba.org
Subject: Re: [Samba] Segfault/panic with Samba 3.0.23d and setuid

On Tue, Jan 23, 2007 at 12:13:57PM -0800, Doug Dimick wrote:
> Thanks, Volker. I've attached the strace output to this email. I'm 
> parsing through it myself, but have to admit I've never looked at a 
> trace before and I don't have a sense for what is considered to be normal
in one of these.

Line 5450 of smbd.strace says

setresuid32(65534, 65534, -1)  = -1 EAGAIN (Resource temporarily
unavailable)

and the manpage for setresuid says

       EAGAIN uid  does  not  match  the current UID and this call would
bring
              that user ID over its NPROC rlimit.

Is the guest account restricted with its number of processes somehow? Some
ulimit restriction?

Volker
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 4105 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20070123/b5f6f5dd/smime.bin