From owner-freebsd-security  Thu Sep  6 12:33:55 2001
Delivered-To: freebsd-security@freebsd.org
Received: from spitfire.velocet.net (spitfire.velocet.net [216.138.223.227])
	by hub.freebsd.org (Postfix) with ESMTP id 243BC37B401
	for <freebsd-security@FreeBSD.ORG>; Thu,  6 Sep 2001 12:33:45 -0700 (PDT)
Received: from nomad.tor.lets.net (H74.C220.tor.velocet.net [216.138.220.74])
	by spitfire.velocet.net (Postfix) with SMTP id E993544A9E9
	for <freebsd-security@FreeBSD.ORG>; Thu,  6 Sep 2001 15:33:43 -0400 (EDT)
Received: (qmail 44179 invoked by uid 1001); 6 Sep 2001 19:28:32 -0000
Date: Thu, 6 Sep 2001 15:28:32 -0400
From: Steve Shorter <steve@nomad.lets.net>
To: Fernando Schapachnik <fschapachnik@vianetworks.com.ar>
Cc: edwin chan <slack@suntop-cn.com>, freebsd-security@FreeBSD.ORG
Subject: Re: when mail full  /tmp partition, system cracked
Message-ID: <20010906152832.A44174@nomad.lets.net>
References: <015701c136d5$91352e00$9201a8c0@home.net> <20010906104547.C56598@ns1.via-net-works.net.ar>
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
User-Agent: Mutt/1.2.5i
In-Reply-To: <20010906104547.C56598@ns1.via-net-works.net.ar>; from fschapachnik@vianetworks.com.ar on Thu, Sep 06, 2001 at 10:45:47AM -0300
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

On Thu, Sep 06, 2001 at 10:45:47AM -0300, Fernando Schapachnik wrote:
> En un mensaje anterior, edwin chan escribió:
> > we found the messages in log:
> > 
> > Sep  5 21:00:33 www /kernel: swap_pager: out of swap space
> > Sep  5 21:00:33 www /kernel: swap_pager_getswapspace: failed
> 
> What might have happened is that a the great amount of email forked a
> great amount of processes which in turn ate all available memory and
> swap. Your machine ran out of swap. Either increase it (look at the
> FAQ & handbook for instructions) or add more memory. Or impose
> resource limits (can do it via login.conf and/or sendmail.cf
> -MaxDaemonChildren, RefuseLA, etc.-).

	What is supposed to happen is the largest process is supposed
to be killed if virtual memory is exhausted. There is a bug in 
4.3-RELEASE that prevents this from happening. The kernel hangs 
before any processes get killed.

	It has fixed in STABLE.

	-steve

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message