From owner-freebsd-hackers Fri Aug 7 23:35:28 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id XAA07263 for freebsd-hackers-outgoing; Fri, 7 Aug 1998 23:35:28 -0700 (PDT) (envelope-from owner-freebsd-hackers@FreeBSD.ORG) Received: from shell.futuresouth.com (mail.futuresouth.com [198.78.58.19]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id XAA07244; Fri, 7 Aug 1998 23:35:26 -0700 (PDT) (envelope-from fullermd@futuresouth.com) Received: (from fullermd@localhost) by shell.futuresouth.com (8.8.8/8.8.8) id BAA11150; Sat, 8 Aug 1998 01:34:56 -0500 (CDT) Message-ID: <19980808013456.49685@futuresouth.com> Date: Sat, 8 Aug 1998 01:34:56 -0500 From: "Matthew D. Fuller" To: dg@root.com Cc: FreeBSD-security@FreeBSD.ORG, hackers@FreeBSD.ORG Subject: Re: Does this mean we have another breakin? References: <199808072337.RAA13808@lariat.lariat.org> <199808080135.SAA00798@implode.root.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.88 In-Reply-To: <199808080135.SAA00798@implode.root.com>; from David Greenman on Fri, Aug 07, 1998 at 06:35:55PM -0700 Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Fri, Aug 07, 1998 at 06:35:55PM -0700, David Greenman woke me up to tell me: > >We were about to do it AGAIN. Now we're holding out some hope that it's > >just a bug -- though perhaps the same one that's crashing us when we try to > >back up. > > > >In any event, I just received private e-mail stating that at least one > >person has encountered VM problems in -stable under heavy CPU loads when > >the swapper kicks in. According to the message, they cause corruption of > >file modification dates. > > Corruption is probably not the right word. There might be a bug where a > page is seen as modified when it isn't, causing the modify date to get > updated. The only way to be certain is to compare the binary with your > backup (e.g. if installed from CDROM, then with the copy on the CDROM). I > haven't personally seen this happen in more than a year, so if the bug is > still there, it must be fairly rare. We get it all the time here. On sendmail on one machine (sendmail -q run out of cron) and on {r}restore on another machine (amanda, I'm guessing) Happens every couple days. *-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-* | FreeBSD; the way computers were meant to be | * "The only reason I'm burning my candle at both ends, is * | that I haven't figured out how to light the middle yet."| * fullermd@futuresouth.com :-} MAtthew Fuller * | http://keystone.westminster.edu/~fullermd | *-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-* To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message