Security Run Output Questions

[Roland Smith]

On Wed, May 23, 2007 at 12:40:19PM -0700, PeterPluta wrote:
> 
> I see this quite regularly. What exactly is the http process doing? I'm
> guessing this is the master process stopping and restarting when I rotate
> logs or something. Can anyone confirm? There is usally more processes, 10-15
> or more. 
> 
> kernel log messages:
> +++ /tmp/security.ioLB2PiJ	Wed May 23 03:01:42 2007
> +pid 30865 (httpd), uid 80: exited on signal 4

According to signal(3), signal 4 is SIGILL; illegal instruction.

Not sure what triggers that. Maybe a stack overflow bug that writes a
bogus value to a return address?

Roland
-- 
R.F.Smith                                   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20070523/16185434/attachment.pgp