Page 1 of 1

grsecurity and apahe problem

PostPosted: Sun Jun 04, 2006 1:50 am
by dropby23
Jun 4 02:06:02 serv kernel: grsec: From 85.99.205.60: signal 11 sent to
/usr/local/apache/bin/httpd[httpd:30831] uid/euid:99/99 gid/egid:99/99, parent
/usr/local/apache/bin/httpd[httpd:4537] uid/euid:0/0 gid/egid:0/0


why all those logs are come from is thhis ip is trying to gain access with using apache or making another thing bacause after these signals http stops working and have a restart

Jun 4 02:05:02 serv kernel: grsec: From 85.99.205.60: signal 11 sent to
/usr/local/apache/bin/httpd[httpd:30831] uid/euid:99/99 gid/egid:99/99, parent
/usr/local/apache/bin/httpd[httpd:4537] uid/euid:0/0 gid/egid:0/0


[06/04/06 02:05:40]: HTTP url request failed, assuming offline.
[06/04/06 02:05:40]: Restarted HTTP service (2 HTTP events today).

PostPosted: Sun Jun 04, 2006 11:28 am
by Kp
Signal 11 is SIGSEGV, segmentation fault. Your httpd is crashing. Without more information, there's no way to know why. Are you getting any other grsec logs about httpd? Try unlimiting core dump size on the httpd family so you can get a core dump the next time this happens.