Page 1 of 1

GRSec issue with apache, need help :-)

PostPosted: Thu Feb 19, 2009 1:17 pm
by sdeluca
Hi there,

First, I wanted to say I'm new to GRSec.

And on a debian system, I have many lines as follows :

Feb 19 18:01:23 stock kernel: grsec: From 212.***.***.***: signal 11 sent to /usr/sbin/apache2[apache2:7428] uid/euid:33/33 gid/egid:33/33, parent /usr/sbin/apache2[apache2:3879] uid/euid:0/0 gid/egid:0/0


Sorry for being naive there, but I have no clue what it is all about and what do I have to do.

I would really appreciate someone help me :-)

Cheers,
Sdl

Re: GRSec issue with apache, need help :-)

PostPosted: Thu Feb 19, 2009 7:54 pm
by spender
11 is the number for the SIGSEGV signal. It's the signal sent to a process when it violates memory protections, generally resulting in a crash. The reasons for it can range from a simple bug to possibly an exploit attempt. Checking your apache error logs might give more insight into the reason for the crashes.

-Brad