kernel log messages

[Chuck Swiger]

On Sep 14, 2007, at 10:05 AM, Ian Lord wrote:
> +++ /tmp/security.iwonKikI   Thu Sep 13 03:02:27 2007
>
> +pid 85092 (httpd), uid 80: exited on signal 11 pid 85097 (httpd), uid
> +80: exited on signal 11 pid 85099 (httpd), uid 80: exited on  
> signal 11
> +pid 85091 (httpd), uid 80: exited on signal 11 pid 85090 (httpd), uid
> +80: exited on signal 11 pid 85094 (httpd), uid 80: exited on  
> signal 11
> [ ... ]
> Is this something I should care about ? First time I see this, and  
> since the
> os mention it to me, I guess it's something important :-)

Well, it could indicate something going wrong with your hardware--  
failing memory or an overheating CPU would tend to make long-running  
daemon processes die.

However, it can also indicate that there was a bug in Apache or one  
of the modules which is being exposed by the incoming requests.  In  
some cases, that may mean that someone malicious is trying to exploit  
a security problem.  You might want to run portaudit and check to  
make sure you're current....

-- 
-Chuck