[grsec] tripwire dying...

pageexec at freemail.hu pageexec at freemail.hu
Sat Dec 11 14:26:05 EST 2004


> grsec: From xxx.xxx.xxx.xxx: attempted resource overstep by requesting 
> 4096 for RLIMIT_CORE against limit 0 by 
> /usr/sbin/tripwire[tripwire:5170] uid/euid:0/0 gid/egid:0/0, parent 
> /bin/bash[bash:19294] uid/euid:0/0 gid/egid:0/0
> 
> The admin told me he changed nothing... Strange situation, however. Any 
> hints?

hard to tell why without knowing more. enable coredumping
(ulimit -c unlimited), get the coredump and analyze it in
gdb ('bt', 'info reg', 'x/16x $esp', 'x/16i $eip', etc),
then we can tell what's going on.



More information about the grsecurity mailing list