From owner-freebsd-security Mon Aug 10 05:22:27 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id FAA02172 for freebsd-security-outgoing; Mon, 10 Aug 1998 05:22:27 -0700 (PDT) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from relay.ucb.crimea.ua (relay.ucb.crimea.ua [194.93.177.113]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id FAA01988 for ; Mon, 10 Aug 1998 05:21:22 -0700 (PDT) (envelope-from ru@ucb.crimea.ua) Received: (from ru@localhost) by relay.ucb.crimea.ua (8.8.8/8.8.8) id PAA05086; Mon, 10 Aug 1998 15:20:30 +0300 (EEST) (envelope-from ru) Message-ID: <19980810152029.A4948@ucb.crimea.ua> Date: Mon, 10 Aug 1998 15:20:29 +0300 From: Ruslan Ermilov To: Brett Glass , security@FreeBSD.ORG Subject: Re: When does login exit with sig 3? Mail-Followup-To: Brett Glass , security@FreeBSD.ORG References: <199808101126.FAA04099@lariat.lariat.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.91i In-Reply-To: <199808101126.FAA04099@lariat.lariat.org>; from Brett Glass on Mon, Aug 10, 1998 at 05:26:12AM -0600 X-Operating-System: FreeBSD 2.2.7-STABLE i386 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Mon, Aug 10, 1998 at 05:26:12AM -0600, Brett Glass wrote: > Just saw these in the log. Are these just timeouts? Or a sign of an attack? > > > pid 27338 (login), uid 0: exited on signal 3 > > pid 2123 (login), uid 0: exited on signal 3 > This was fixed by Bruce Evance on Friday, July 31, 1998 in revision 1.12.2.11 of src/usr.bin/login/login.c Please take a look at the following problem report: http://www.freebsd.org/cgi/query-pr.cgi?pr=7444 HTH, -- Ruslan Ermilov Sysadmin and DBA of the ru@ucb.crimea.ua United Commercial Bank +380.652.247.647 Simferopol, Ukraine http://www.FreeBSD.org The Power To Serve http://www.oracle.com Enabling The Information Age To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe security" in the body of the message