From owner-freebsd-security@FreeBSD.ORG Fri Aug 27 01:51:58 2004 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1C5EA16A4CE for ; Fri, 27 Aug 2004 01:51:58 +0000 (GMT) Received: from mproxy.gmail.com (rproxy.gmail.com [64.233.170.199]) by mx1.FreeBSD.org (Postfix) with ESMTP id C4E8B43D31 for ; Fri, 27 Aug 2004 01:51:57 +0000 (GMT) (envelope-from david.downey@gmail.com) Received: by mproxy.gmail.com with SMTP id 77so205608rnl for ; Thu, 26 Aug 2004 18:51:54 -0700 (PDT) Received: by 10.38.15.69 with SMTP id 69mr2235038rno; Thu, 26 Aug 2004 18:51:54 -0700 (PDT) Received: by 10.38.82.68 with HTTP; Thu, 26 Aug 2004 18:51:54 -0700 (PDT) Message-ID: <6917b781040826185127c7b744@mail.gmail.com> Date: Thu, 26 Aug 2004 21:51:54 -0400 From: "David D.W. Downey" To: Ng Pheng Siong In-Reply-To: <20040827002100.GB653@vista.netmemetic.com> Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit References: <20040827002100.GB653@vista.netmemetic.com> cc: freebsd-security@freebsd.org Subject: Re: ipfw core dump X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: "David D.W. Downey" List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 27 Aug 2004 01:51:58 -0000 On Fri, 27 Aug 2004 08:21:00 +0800, Ng Pheng Siong wrote: > Hi, > > This is the first time I've come across this: > > pid 11415 (ipfw), uid 0: exited on signal 11 (core dumped) > > The core dump landed in root's home directory in one of my jails. > > Has anyone seen this before? Should I be concerned? chkrootkit says > nothing. (How trustworthy is its output? ;-) > I have on a src upgrade from 4.10-RELEASE-p2 to 5.2.1. I can give no details as to the "why". -- David D.W. Downey