From owner-freebsd-security  Wed Jun 21 23:49:41 2000
Delivered-To: freebsd-security@freebsd.org
Received: from mics.co.za (saturn.mics.co.za [196.34.165.130])
	by hub.freebsd.org (Postfix) with ESMTP id 08D9837B926
	for <freebsd-security@freebsd.org>; Wed, 21 Jun 2000 23:49:06 -0700 (PDT)
	(envelope-from christiaan@mics.co.za)
Received: from vision.boxlet.co.za
	([196.34.165.140] helo=mics.co.za ident=vision)
	by mics.co.za with esmtp (Exim 3.13 #1)
	id 1350na-0004H9-00
	for freebsd-security@freebsd.org; Thu, 22 Jun 2000 08:49:14 +0200
Message-ID: <3951B6C8.DA609831@mics.co.za>
Date: Thu, 22 Jun 2000 08:48:40 +0200
From: Christiaan Rademan <christiaan@mics.co.za>
Organization: MICS
X-Mailer: Mozilla 4.72 [en] (X11; I; FreeBSD 4.0-STABLE i386)
X-Accept-Language: en
MIME-Version: 1.0
To: freebsd-security@freebsd.org
Subject: Hi All.
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

Greetings..

We here have a FreeBSD 4.0-Stable server, running latest services. ie
for mail.
The problem is it has been rebooting from time to time.. No reason has
been given to me
in detail via the log file. The machine has definitly not been hacked
according to some probes.

I am left with a question, "Did I brake something, or is there a new
DoS attack or something else"

All I have done is changed the chflags on some odd directories /bin with
-R.
Directories: /bin - /sbin - /usr/bin - /usr/sbin - /usr/libexec

Then I mostley went around removing +x filemodes from some slightly
important suid exec, but
theyr still excuteable by owner,group : root,wheel.

Other than that, the server has definitly not got hardware problems,
that has been replaced fully.

I also have the system running kern.securelevel=3... via rc.conf

I succesfully had a machine running with uptime for over 60days, with
the changes.
Although now I have to question why the machine reboots during the week?

So far, it looks like the kernel is screwing up, for no known reason.

I am about to try running the machine on a generic kernel, maybe make an
attempt to see
if it still brakes.

If anyone has a clue what might be going wrong here, please contact me..

Regards, Christiaan Rademan




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message