[grsec] tripwire dying...

Edin Dizdarevic edin.dizdarevic at interActive-Systems.de
Sun Dec 12 07:04:49 EST 2004


Allright, thanks for now. The only change recently happened on the setup
is the policy so I suppose it might have something to do with it. It
wouldn't be that surprising if it has...

Regards,
Edin

pageexec at freemail.hu schrieb am 11.12.2004 20:26:
>>grsec: From xxx.xxx.xxx.xxx: attempted resource overstep by requesting 
>>4096 for RLIMIT_CORE against limit 0 by 
>>/usr/sbin/tripwire[tripwire:5170] uid/euid:0/0 gid/egid:0/0, parent 
>>/bin/bash[bash:19294] uid/euid:0/0 gid/egid:0/0
>>
>>The admin told me he changed nothing... Strange situation, however. Any 
>>hints?
> 
> 
> hard to tell why without knowing more. enable coredumping
> (ulimit -c unlimited), get the coredump and analyze it in
> gdb ('bt', 'info reg', 'x/16x $esp', 'x/16i $eip', etc),
> then we can tell what's going on.
> 
> 

-- 
Edin Dizdarevic


More information about the grsecurity mailing list