grsecurity and apahe problem

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

grsecurity and apahe problem

Postby dropby23 » Sun Jun 04, 2006 1:50 am

Jun 4 02:06:02 serv kernel: grsec: From 85.99.205.60: signal 11 sent to
/usr/local/apache/bin/httpd[httpd:30831] uid/euid:99/99 gid/egid:99/99, parent
/usr/local/apache/bin/httpd[httpd:4537] uid/euid:0/0 gid/egid:0/0


why all those logs are come from is thhis ip is trying to gain access with using apache or making another thing bacause after these signals http stops working and have a restart

Jun 4 02:05:02 serv kernel: grsec: From 85.99.205.60: signal 11 sent to
/usr/local/apache/bin/httpd[httpd:30831] uid/euid:99/99 gid/egid:99/99, parent
/usr/local/apache/bin/httpd[httpd:4537] uid/euid:0/0 gid/egid:0/0


[06/04/06 02:05:40]: HTTP url request failed, assuming offline.
[06/04/06 02:05:40]: Restarted HTTP service (2 HTTP events today).
dropby23
 
Posts: 17
Joined: Wed Sep 21, 2005 5:16 am

Postby Kp » Sun Jun 04, 2006 11:28 am

Signal 11 is SIGSEGV, segmentation fault. Your httpd is crashing. Without more information, there's no way to know why. Are you getting any other grsec logs about httpd? Try unlimiting core dump size on the httpd family so you can get a core dump the next time this happens.
Kp
 
Posts: 46
Joined: Tue Sep 20, 2005 12:56 am


Return to grsecurity support