Hello, all. For some reason, I still do not receive messages from this
list even though I am subscribed. I thus missed Daniel's reply to this
issue quoted below:
Hi John,
If you disable rootkit checking and leave integrity monitoring
running, the problem goes away?
These segfaults are not a known issue and I had no idea of this
kernel
bug... Is it related to
the glob implementation?
*Also, if you don't use wildcards on syscheck, it all works?
We have disabled rootkit checking because of the kernel bug in 2.6.27&28
which spins the kernel out of control and is only recoverable via a cold
boot. Thus the problem occurs with rootkit disabled.
It also occurs on several systems which do not use wildcards within
syscheck. As I review my logs, the error occurs shortly after syscheck
starts so we find the syscheck is not running most of time. What can we
do next to help troubleshoot this issue? Thanks - John
PS - any suggestions on why I never receive the list's messages? - Of
course, you'll have to answer me directly!
--
John A. Sullivan III
Open Source Development Corporation
+1 207-985-7880
[email protected]
http://www.spiritualoutreach.com
Making Christianity intelligible to secular society
