[grsec] tripwire dying...
pageexec at freemail.hu
pageexec at freemail.hu
Sat Dec 11 14:26:05 EST 2004
> grsec: From xxx.xxx.xxx.xxx: attempted resource overstep by requesting
> 4096 for RLIMIT_CORE against limit 0 by
> /usr/sbin/tripwire[tripwire:5170] uid/euid:0/0 gid/egid:0/0, parent
> /bin/bash[bash:19294] uid/euid:0/0 gid/egid:0/0
>
> The admin told me he changed nothing... Strange situation, however. Any
> hints?
hard to tell why without knowing more. enable coredumping
(ulimit -c unlimited), get the coredump and analyze it in
gdb ('bt', 'info reg', 'x/16x $esp', 'x/16i $eip', etc),
then we can tell what's going on.
More information about the grsecurity
mailing list