Date: Thu, 6 Nov 2008 05:36:02 GMT From: Benjamin Lee <ben@b1c1l1.com> To: freebsd-gnats-submit@FreeBSD.org Subject: misc/128632: security periodic 700.kernelmsg repeats messages Message-ID: <200811060536.mA65a2hs063551@www.freebsd.org> Resent-Message-ID: <200811060540.mA65e3kC079968@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 128632 >Category: misc >Synopsis: security periodic 700.kernelmsg repeats messages >Confidential: no >Severity: non-critical >Priority: low >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Thu Nov 06 05:40:03 UTC 2008 >Closed-Date: >Last-Modified: >Originator: Benjamin Lee >Release: RELENG_6_2 >Organization: >Environment: FreeBSD *** 6.2-RELEASE-p8 FreeBSD 6.2-RELEASE-p8 #0: Mon Nov 5 23:47:24 PST 2007 root@***:/usr/obj/usr/src/sys/CUSTOM i386 >Description: If a single kernel message is repeated frequently, the security periodic 700.kernelmsg will cause other kernel messages to show up in the security run output multiple times. This is due to the fact that the size of the system message buffer is fixed so diff(1) doesn't recognize messages getting "pushed off the top" of the buffer. For example, the contents of dmesg.yesterday: lnc0: Missed packet -- no receive buffer [lnc0... repeated 890 times] pid 772 (httpd), uid 0: exited on signal 11 (core dumped) lnc0: Missed packet -- no receive buffer [lnc0... repeated 587 times] and dmesg.today: lnc0: Missed packet -- no receive buffer [lnc0... repeated 838 times] pid 772 (httpd), uid 0: exited on signal 11 (core dumped) lnc0: Missed packet -- no receive buffer [lnc0... repeated 639 times] and the diff: $ diff dmesg.yesterday dmesg.today 838a839 > pid 772 (httpd), uid 0: exited on signal 11 (core dumped) 891d891 < pid 772 (httpd), uid 0: exited on signal 11 (core dumped) which isn't desirable since the message is not new and therefore shouldn't show up again in the security run output. >How-To-Repeat: Have one kernel message be printed frequently and others printed occasionally. >Fix: No known solution. >Release-Note: >Audit-Trail: >Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200811060536.mA65a2hs063551>