GRSEC: Denied Resource Overstep - Varnish

Customer support forums for Atomic Protector (formerly Atomic Secured Linux). There is no such thing as a bad question here as long as it pertains to using Atomic Protector. Newbies feel free to get help getting started or asking questions that may be obvious. Regular users are asked to be gentle. :-)
imadsani
Forum Regular
Forum Regular
Posts: 112
Joined: Mon Sep 16, 2013 10:10 am
Location: Lahore

GRSEC: Denied Resource Overstep - Varnish

Unread post by imadsani »

I'm trying to get Varnish 4.1/5.1 to work on a server with the art kernel and ASL installed. As soon as I upgrade and add my config, which works fine on a server without the art kernel, varnish stops working, won't start. I looked into ASL's console and see the following error: (had to upload a img because the forum blocked me when I pasted the whole error message)

Image

Any ideas?

BTW, I tried accessing support but the website is down
User avatar
mikeshinn
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
Posts: 4119
Joined: Thu Feb 07, 2008 7:49 pm
Location: Chantilly, VA

Re: GRSEC: Denied Resource Overstep - Varnish

Unread post by mikeshinn »

Thats just the kernel telling you that your OS is configured to set a limit on some resource, in this case RLIMIT_MEMLOCK, and your application wants to use more than your OS is configured to allow and that your OS stopped it. ASL doesnt set or enforce these limits, it just tells you if the OS stopped something from running and why. A normal kernel wont tell you anything. You'll need to increase whatever limits you have on your system to allow that application to run.

Heres a post from the varnish website:

https://www.varnish-cache.org/lists/pip ... 00089.html

And a post in our wiki on this:

https://wiki.atomicorp.com/wiki/index.p ... RLIMIT_.2A

As for the support portal, we use zendesk and they host and run everything. Thats quite horrifying to hear that their entire system was down, can you tell me when this was? I'm sure they will want to know zendesk was down.
Post Reply