Hi,
Just to keep in touch, I tested 'squid 4.0.23' yesterday - it seemed to
run fine at first. But after a while I took a closer look at the logs
and discovered a bunch of kernel messages within a few hours and I don't
know what exactly triggered these messages:
...
132 Time(s): grsec: denied kernel module auto-load of
nf_conntrack_netlink by uid 23
...
As far as I found out: "uid 23" => squid-user, and the new squid tried
to 'autoload' a module which 'grsec' didn't like. Is this a correct
interpretation and has anyone some useable clue how to avoid this?
Besides, after going back to '3.5.27' the messages didn't came back
again. '4.0.22' didn't throw these messages, too. They changed something
and I don't know what it is...
Thanks for all tips!
Best,
Matthias