Date: Sat, 8 Aug 1998 01:34:56 -0500 From: "Matthew D. Fuller" <fullermd@futuresouth.com> To: dg@root.com Cc: FreeBSD-security@FreeBSD.ORG, hackers@FreeBSD.ORG Subject: Re: Does this mean we have another breakin? Message-ID: <19980808013456.49685@futuresouth.com> In-Reply-To: <199808080135.SAA00798@implode.root.com>; from David Greenman on Fri, Aug 07, 1998 at 06:35:55PM -0700 References: <199808072337.RAA13808@lariat.lariat.org> <199808080135.SAA00798@implode.root.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Aug 07, 1998 at 06:35:55PM -0700, David Greenman woke me up to tell me: > >We were about to do it AGAIN. Now we're holding out some hope that it's > >just a bug -- though perhaps the same one that's crashing us when we try to > >back up. > > > >In any event, I just received private e-mail stating that at least one > >person has encountered VM problems in -stable under heavy CPU loads when > >the swapper kicks in. According to the message, they cause corruption of > >file modification dates. > > Corruption is probably not the right word. There might be a bug where a > page is seen as modified when it isn't, causing the modify date to get > updated. The only way to be certain is to compare the binary with your > backup (e.g. if installed from CDROM, then with the copy on the CDROM). I > haven't personally seen this happen in more than a year, so if the bug is > still there, it must be fairly rare. We get it all the time here. On sendmail on one machine (sendmail -q run out of cron) and on {r}restore on another machine (amanda, I'm guessing) Happens every couple days. *-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-* | FreeBSD; the way computers were meant to be | * "The only reason I'm burning my candle at both ends, is * | that I haven't figured out how to light the middle yet."| * fullermd@futuresouth.com :-} MAtthew Fuller * | http://keystone.westminster.edu/~fullermd | *-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-* To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19980808013456.49685>