Security Run Output Questions

[Garrett Cooper]

Roland Smith wrote:
> On Wed, May 23, 2007 at 12:40:19PM -0700, PeterPluta wrote:
>> I see this quite regularly. What exactly is the http process doing? I'm
>> guessing this is the master process stopping and restarting when I rotate
>> logs or something. Can anyone confirm? There is usally more processes, 10-15
>> or more. 
>>
>> kernel log messages:
>> +++ /tmp/security.ioLB2PiJ	Wed May 23 03:01:42 2007
>> +pid 30865 (httpd), uid 80: exited on signal 4
> 
> According to signal(3), signal 4 is SIGILL; illegal instruction.
> 
> Not sure what triggers that. Maybe a stack overflow bug that writes a
> bogus value to a return address?
> 
> Roland

Are you running CURRENT and did you update to GCC 4.2 and install httpd 
lately? If so, you need to read a few threads on the current@ list 
pertaining to GCC 4.2 written in the past 1-2 weeks.

-Garrett