kernel kills apps

This is a discussion on kernel kills apps within the Linux Security forums, part of the System Security and Security Related category; I am running a secure kernel version of Mandrake 9.2 (security level 4). When I open a browser page ...


Go Back   Usenet Forums > System Security and Security Related > Linux Security

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 05-03-2004
LTŠ
 
Posts: n/a
Default kernel kills apps


I am running a secure kernel version of Mandrake 9.2 (security level 4).
When I open a browser page that uses Java scripts or try to run Java
programs from the command-line, the kernel kills the app.

Below are 2 examples from the /var/log/messages file.

Does anyone know how to adjust the kernel resource allocations, so
that the kernel won't kill my user apps?




example 1:

The below example of the kernel killing a Java program...

$ java FileViewer
#
# HotSpot Virtual Machine Error, Internal Error
# Please report this error at
# http://java.sun.com/cgi-bin/bugreport.cgi
#
# Java VM: Java HotSpot(TM) Client VM (1.4.2-b28 mixed mode)
#
# Error ID: 4F533F4C494E55580E43505001C9
#

Heap at VM Abort:
Heap


****************
Another exception has been detected while we were handling last error.
Dumping information about last error:
ERROR REPORT FILE = (N/A)
PC = 0x48e68a88
SIGNAL = 11
FUNCTION NAME = (N/A)
OFFSET = 0xFFFFFFFF
LIBRARY NAME = (N/A)
Please check ERROR REPORT FILE for further information, if there is any.
Good bye.
Abort



/var/log/mesages

May 2 19:17:21 lt kernel: grsec: signal 11 sent to (java:28050)
UID(501) EUID(501), parent (ksh:15836) UID(501) EUID(501)

May 2 19:17:21 lt kernel: grsec: signal 11 sent to (java:28050)
UID(501) EUID(501), parent (ksh:15836) UID(501) EUID(501)

May 2 19:17:21 lt kernel: grsec: signal 6 sent to (java:28050) UID(501)
EUID(501), parent (ksh:15836) UID(501) EUID(501)

May 2 19:17:21 lt kernel: grsec: attempted resource overstep by
requesting 4096 for RLIMIT_CORE against limit 0 by (java:28050) UID(501)
EUID(501), parent (ksh:15836) UID(501) EUID(501)




example 2:

Here is /var/log/messages after netscape is kill by the kernel...

--snip--
May 2 18:13:42 lt kernel: grsec: signal 11 sent to (java_vm:22598)
UID(501) EUID(501), parent (netscape-bin:32224) UID(501) EUID(501)

May 2 18:13:42 lt kernel: grsec: signal 11 sent to (java_vm:22598)
UID(501) EUID(501), parent (netscape-bin:32224) UID(501) EUID(501)

May 2 18:13:42 lt kernel: grsec: signal 6 sent to (java_vm:22598)
UID(501) EUID(501), parent (netscape-bin:32224) UID(501) EUID(501)

May 2 18:13:42 lt kernel: grsec: attempted resource overstep by
requesting 4096 for RLIMIT_CORE against limit 0 by (java_vm:22598)
UID(501) EUID(501),parent (netscape-bin:32224) UID(501) EUID(501)
--end snip--


Reply With Quote
  #2 (permalink)  
Old 05-03-2004
Robert Delahunt
 
Posts: n/a
Default Re: kernel kills apps

LTŠ wrote:

>
> I am running a secure kernel version of Mandrake 9.2 (security level 4).
> When I open a browser page that uses Java scripts or try to run Java
> programs from the command-line, the kernel kills the app.
>
> Below are 2 examples from the /var/log/messages file.
>
> Does anyone know how to adjust the kernel resource allocations, so
> that the kernel won't kill my user apps?
>
>
>
>
> example 1:
>
> The below example of the kernel killing a Java program...
>
> $ java FileViewer
> #
> # HotSpot Virtual Machine Error, Internal Error
> # Please report this error at
> # http://java.sun.com/cgi-bin/bugreport.cgi
> #
> # Java VM: Java HotSpot(TM) Client VM (1.4.2-b28 mixed mode)
> #
> # Error ID: 4F533F4C494E55580E43505001C9
> #
>
> Heap at VM Abort:
> Heap
>
>
> ****************
> Another exception has been detected while we were handling last error.
> Dumping information about last error:
> ERROR REPORT FILE = (N/A)
> PC = 0x48e68a88
> SIGNAL = 11
> FUNCTION NAME = (N/A)
> OFFSET = 0xFFFFFFFF
> LIBRARY NAME = (N/A)
> Please check ERROR REPORT FILE for further information, if there is any.
> Good bye.
> Abort
>
>
>
> /var/log/mesages
>
> May 2 19:17:21 lt kernel: grsec: signal 11 sent to (java:28050)
> UID(501) EUID(501), parent (ksh:15836) UID(501) EUID(501)
>
> May 2 19:17:21 lt kernel: grsec: signal 11 sent to (java:28050)
> UID(501) EUID(501), parent (ksh:15836) UID(501) EUID(501)
>
> May 2 19:17:21 lt kernel: grsec: signal 6 sent to (java:28050) UID(501)
> EUID(501), parent (ksh:15836) UID(501) EUID(501)
>
> May 2 19:17:21 lt kernel: grsec: attempted resource overstep by
> requesting 4096 for RLIMIT_CORE against limit 0 by (java:28050) UID(501)
> EUID(501), parent (ksh:15836) UID(501) EUID(501)
>
>
>
>
> example 2:
>
> Here is /var/log/messages after netscape is kill by the kernel...
>
> --snip--
> May 2 18:13:42 lt kernel: grsec: signal 11 sent to (java_vm:22598)
> UID(501) EUID(501), parent (netscape-bin:32224) UID(501) EUID(501)
>
> May 2 18:13:42 lt kernel: grsec: signal 11 sent to (java_vm:22598)
> UID(501) EUID(501), parent (netscape-bin:32224) UID(501) EUID(501)
>
> May 2 18:13:42 lt kernel: grsec: signal 6 sent to (java_vm:22598)
> UID(501) EUID(501), parent (netscape-bin:32224) UID(501) EUID(501)
>
> May 2 18:13:42 lt kernel: grsec: attempted resource overstep by
> requesting 4096 for RLIMIT_CORE against limit 0 by (java_vm:22598)
> UID(501) EUID(501),parent (netscape-bin:32224) UID(501) EUID(501)
> --end snip--


Adjust the Java security instead, and/or upgrade to Mandrake 10, and/or use
something different. Most people I've encountered don't bother using Java
on Linux, but I have no clue on my own.

--
Why is it taking so long for her to bring out all the good in you?

Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 02:42 PM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0