Problema #394
Access: out of memory
| Status: | Resolvida | Start date: | 01 Nov 2011 | |
|---|---|---|---|---|
| Priority: | Urgente | Due date: | ||
| Assignee: | Gabriel Winckler | % Done: | 0% | |
| Category: | - | |||
| Target version: | - |
Description
O IDS reportou:
OSSEC HIDS Notification. 2011 Oct 31 21:16:59 Received From: (access) 200.145.46.37->/var/log/messages Rule: 1002 fired (level 2) -> "Unknown problem somewhere in the system." Portion of the log(s): Oct 31 21:16:57 access kernel: [<ffffffff8005dde9>] error_exit+0x0/0x84 --END OF NOTIFICATION OSSEC HIDS Notification. 2011 Oct 31 21:17:05 Received From: (access) 200.145.46.37->/var/log/messages Rule: 5108 fired (level 12) -> "System running out of memory. Availability of the system is in risk." Portion of the log(s): Oct 31 21:17:04 access kernel: Out of memory: Killed process 6427, UID 10097, (trjconv). --END OF NOTIFICATION
History
#1 Updated by Gabriel Winckler about 15 years ago
- Status changed from Nova to Resolvida
- Assignee set to Gabriel Winckler
O servidor teve que ser reiniciado.
Foram adotadas políticas mais rígidas sobre essa máquina:
/etc/security/limits.conf:
* hard rss 524288 * hard as 1048576 * hard nproc 256 * - maxlogins 16 * hard nofile 16384 * hard fsize 1073741824
Os usuários foram notificados, bem como o usuário que disparou os processos abusivos.