This is a discussion on kernel kills apps within the Linux Security forums, part of the System Security and Security Related category; I am running a secure kernel version of Mandrake 9.2 (security level 4). When I open a browser page ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
I am running a secure kernel version of Mandrake 9.2 (security level 4). When I open a browser page that uses Java scripts or try to run Java programs from the command-line, the kernel kills the app. Below are 2 examples from the /var/log/messages file. Does anyone know how to adjust the kernel resource allocations, so that the kernel won't kill my user apps? example 1: The below example of the kernel killing a Java program... $ java FileViewer # # HotSpot Virtual Machine Error, Internal Error # Please report this error at # http://java.sun.com/cgi-bin/bugreport.cgi # # Java VM: Java HotSpot(TM) Client VM (1.4.2-b28 mixed mode) # # Error ID: 4F533F4C494E55580E43505001C9 # Heap at VM Abort: Heap **************** Another exception has been detected while we were handling last error. Dumping information about last error: ERROR REPORT FILE = (N/A) PC = 0x48e68a88 SIGNAL = 11 FUNCTION NAME = (N/A) OFFSET = 0xFFFFFFFF LIBRARY NAME = (N/A) Please check ERROR REPORT FILE for further information, if there is any. Good bye. Abort /var/log/mesages May 2 19:17:21 lt kernel: grsec: signal 11 sent to (java:28050) UID(501) EUID(501), parent (ksh:15836) UID(501) EUID(501) May 2 19:17:21 lt kernel: grsec: signal 11 sent to (java:28050) UID(501) EUID(501), parent (ksh:15836) UID(501) EUID(501) May 2 19:17:21 lt kernel: grsec: signal 6 sent to (java:28050) UID(501) EUID(501), parent (ksh:15836) UID(501) EUID(501) May 2 19:17:21 lt kernel: grsec: attempted resource overstep by requesting 4096 for RLIMIT_CORE against limit 0 by (java:28050) UID(501) EUID(501), parent (ksh:15836) UID(501) EUID(501) example 2: Here is /var/log/messages after netscape is kill by the kernel... --snip-- May 2 18:13:42 lt kernel: grsec: signal 11 sent to (java_vm:22598) UID(501) EUID(501), parent (netscape-bin:32224) UID(501) EUID(501) May 2 18:13:42 lt kernel: grsec: signal 11 sent to (java_vm:22598) UID(501) EUID(501), parent (netscape-bin:32224) UID(501) EUID(501) May 2 18:13:42 lt kernel: grsec: signal 6 sent to (java_vm:22598) UID(501) EUID(501), parent (netscape-bin:32224) UID(501) EUID(501) May 2 18:13:42 lt kernel: grsec: attempted resource overstep by requesting 4096 for RLIMIT_CORE against limit 0 by (java_vm:22598) UID(501) EUID(501),parent (netscape-bin:32224) UID(501) EUID(501) --end snip-- |
|
|||
|
LTŠ wrote:
> > I am running a secure kernel version of Mandrake 9.2 (security level 4). > When I open a browser page that uses Java scripts or try to run Java > programs from the command-line, the kernel kills the app. > > Below are 2 examples from the /var/log/messages file. > > Does anyone know how to adjust the kernel resource allocations, so > that the kernel won't kill my user apps? > > > > > example 1: > > The below example of the kernel killing a Java program... > > $ java FileViewer > # > # HotSpot Virtual Machine Error, Internal Error > # Please report this error at > # http://java.sun.com/cgi-bin/bugreport.cgi > # > # Java VM: Java HotSpot(TM) Client VM (1.4.2-b28 mixed mode) > # > # Error ID: 4F533F4C494E55580E43505001C9 > # > > Heap at VM Abort: > Heap > > > **************** > Another exception has been detected while we were handling last error. > Dumping information about last error: > ERROR REPORT FILE = (N/A) > PC = 0x48e68a88 > SIGNAL = 11 > FUNCTION NAME = (N/A) > OFFSET = 0xFFFFFFFF > LIBRARY NAME = (N/A) > Please check ERROR REPORT FILE for further information, if there is any. > Good bye. > Abort > > > > /var/log/mesages > > May 2 19:17:21 lt kernel: grsec: signal 11 sent to (java:28050) > UID(501) EUID(501), parent (ksh:15836) UID(501) EUID(501) > > May 2 19:17:21 lt kernel: grsec: signal 11 sent to (java:28050) > UID(501) EUID(501), parent (ksh:15836) UID(501) EUID(501) > > May 2 19:17:21 lt kernel: grsec: signal 6 sent to (java:28050) UID(501) > EUID(501), parent (ksh:15836) UID(501) EUID(501) > > May 2 19:17:21 lt kernel: grsec: attempted resource overstep by > requesting 4096 for RLIMIT_CORE against limit 0 by (java:28050) UID(501) > EUID(501), parent (ksh:15836) UID(501) EUID(501) > > > > > example 2: > > Here is /var/log/messages after netscape is kill by the kernel... > > --snip-- > May 2 18:13:42 lt kernel: grsec: signal 11 sent to (java_vm:22598) > UID(501) EUID(501), parent (netscape-bin:32224) UID(501) EUID(501) > > May 2 18:13:42 lt kernel: grsec: signal 11 sent to (java_vm:22598) > UID(501) EUID(501), parent (netscape-bin:32224) UID(501) EUID(501) > > May 2 18:13:42 lt kernel: grsec: signal 6 sent to (java_vm:22598) > UID(501) EUID(501), parent (netscape-bin:32224) UID(501) EUID(501) > > May 2 18:13:42 lt kernel: grsec: attempted resource overstep by > requesting 4096 for RLIMIT_CORE against limit 0 by (java_vm:22598) > UID(501) EUID(501),parent (netscape-bin:32224) UID(501) EUID(501) > --end snip-- Adjust the Java security instead, and/or upgrade to Mandrake 10, and/or use something different. Most people I've encountered don't bother using Java on Linux, but I have no clue on my own. -- Why is it taking so long for her to bring out all the good in you? |