Log explaination

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

Log explaination

Postby Byte » Thu Apr 03, 2014 6:19 am

Hello all,
can someone please help me out on understanding the following log line generated by grsec ?

start kernel: grsec: From XX.XX.XX.XX: (qmaild:U:/usr/local/bin/tcpserver) denied bind() to 0.0.0.0 port 21428 sock type dgram protocol udp by /usr/local/bin/tcpserver[tcpserver:24216] uid/euid:700/700 gid/egid:700/700, parent /usr/local/bin/tcpserver[tcpserver:28283] uid/euid:700/700 gid/egid:700/700


From what I understand, someone from ip XX.XX.XX.XX tried to start qmaild daemon (via tcpserver) to listen on all interfaces and on port 21428 of udp !!! Is this what the log say or I have completely lost the ball here ?

Thank you
Byte
 
Posts: 2
Joined: Fri Feb 14, 2014 5:48 pm

Re: Log explaination

Postby Byte » Sat Apr 05, 2014 12:27 pm

anyone can help?
Byte
 
Posts: 2
Joined: Fri Feb 14, 2014 5:48 pm


Return to grsecurity support