Overstep process limit

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

Overstep process limit

Postby luke » Mon Jun 09, 2003 10:05 am

My mail server is configured with :
kernel-2.4.19
grsecurity-1.9.6
iptables-1.2.7a
postfix-2.0.9
courier-imap-1.7.1 ---> with maxprocs=6

and /etc/security/limits.conf have :
* hard nproc 50

Can't understand why get :
grsec: Attempt to overstep process limit by imaplogin

in this situation:

- booting server
- some other server procs start (ftpd, named, ntpd, etc...)
- connect to couriertcpd from a mozilla client
--> 1st try --> Ok
(10 new procs start on server having 5 imap accounts)
- close mozilla client
(10 procs end)
- connect to couriertcpd from a mozilla client
--> 2nd try --> grsec: Attempt....

Where overstep process limit ?

Seems to me that the process counter isn't reset when I close imap client

Any suggest is welcome
thanks in advance

Lucio
luke
 
Posts: 1
Joined: Mon Jun 09, 2003 9:41 am

Postby spender » Mon Jun 09, 2003 1:29 pm

Try out current CVS. I believe I've just fixed the bug. It's a bug in Solar Designer's code too. I'm going to mail him about it right now.

-Brad
spender
 
Posts: 2185
Joined: Wed Feb 20, 2002 8:00 pm


Return to grsecurity support