[grsec] tripwire dying...
Edin Dizdarevic
edin.dizdarevic at interActive-Systems.de
Sun Dec 12 07:04:49 EST 2004
Allright, thanks for now. The only change recently happened on the setup
is the policy so I suppose it might have something to do with it. It
wouldn't be that surprising if it has...
Regards,
Edin
pageexec at freemail.hu schrieb am 11.12.2004 20:26:
>>grsec: From xxx.xxx.xxx.xxx: attempted resource overstep by requesting
>>4096 for RLIMIT_CORE against limit 0 by
>>/usr/sbin/tripwire[tripwire:5170] uid/euid:0/0 gid/egid:0/0, parent
>>/bin/bash[bash:19294] uid/euid:0/0 gid/egid:0/0
>>
>>The admin told me he changed nothing... Strange situation, however. Any
>>hints?
>
>
> hard to tell why without knowing more. enable coredumping
> (ulimit -c unlimited), get the coredump and analyze it in
> gdb ('bt', 'info reg', 'x/16x $esp', 'x/16i $eip', etc),
> then we can tell what's going on.
>
>
--
Edin Dizdarevic
More information about the grsecurity
mailing list