LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 12-13-2003, 06:32 AM   #1
freelinuxcpp
Member
 
Registered: Jul 2003
Posts: 129

Rep: Reputation: 15
segmentation fault !


i got this message :
1314 segmentation fault
while booting my linux box
it's chown after random stuff script , many services are now unloadable ! and the system is realy in a real panik ! anyone has got like this message ?
thnx for any reply

Last edited by freelinuxcpp; 12-13-2003 at 06:56 AM.
 
Old 12-13-2003, 07:05 AM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,353
Blog Entries: 55

Rep: Reputation: 3541Reputation: 3541Reputation: 3541Reputation: 3541Reputation: 3541Reputation: 3541Reputation: 3541Reputation: 3541Reputation: 3541Reputation: 3541Reputation: 3541
Is this a situation you got after installing Linux, upgrading software or for no particular reason?

I would start with trying to boot into runlevel 1, or use your distro's (rescue) cd, then check out the integrity of your installed packages and check out the system logs.
 
Old 12-13-2003, 07:23 AM   #3
freelinuxcpp
Member
 
Registered: Jul 2003
Posts: 129

Original Poster
Rep: Reputation: 15
this has happened after a reboot , i booted the box on run leverl 1 , and said YES for cheking disk integrity while linux boot but i tryed to redo fsck, but it says that it's a quite dangerous to ckeck a mounted fs , i haven't a rescue disk ,
the system stops on sendmail , it just stay frozen even if i wait minutes for it , what i can't understand is that the sf ckeking process returns [PASSED] thus normaly the ssystem should boot normaly !
really don't know what to do , the big pb is this is a mail server of my company , the situation is so critic !
help please

Last edited by freelinuxcpp; 12-13-2003 at 07:35 AM.
 
Old 12-13-2003, 07:38 AM   #4
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,353
Blog Entries: 55

Rep: Reputation: 3541Reputation: 3541Reputation: 3541Reputation: 3541Reputation: 3541Reputation: 3541Reputation: 3541Reputation: 3541Reputation: 3541Reputation: 3541Reputation: 3541
this has happened after a reboot
Please be as clear as you can: is this a situation you got after installing or upgrading software or for no particular reason?

and said YES for cheking disk integrity
With all due respect, please read carefully before replying. I said "check out the integrity of your installed packages and check out the system logs."

i haven't a rescue disk
Then either burn a rescue cdr or download the floppy for your distro or tell us the distribution and release version details.

Any more info could help. Please be verbose. Help us help you, I mean.
 
Old 12-13-2003, 09:27 AM   #5
freelinuxcpp
Member
 
Registered: Jul 2003
Posts: 129

Original Poster
Rep: Reputation: 15
yes u right , u can figure out that due to the steress i even not understood ur reply well .
well
it's a redhat 7.1 , with sendmail .
everything was ok until i decided to reboot the machine because someone wasn't able to reach his mail box
well after rebooting i got this message which say segmentation fault ! and the S80randmom script has an error in line .... , then the hostname was unable to be set , well after that the ssh daemon was unable to start also , with many other daemon like xfs , and finaly sendmail which freeze while trying to start .and when trying to reboot it's freeze on syslog ,then i be obliged to force rebooting with reset button and here is a summery of my infernal problem.
 
Old 12-13-2003, 10:35 AM   #6
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,353
Blog Entries: 55

Rep: Reputation: 3541Reputation: 3541Reputation: 3541Reputation: 3541Reputation: 3541Reputation: 3541Reputation: 3541Reputation: 3541Reputation: 3541Reputation: 3541Reputation: 3541
yes u right , u can figure out that due to the steress i even not understood ur reply well .
Ha, yes. I should have started saying "keep your head cool", or "don't stress out" :-]


OK, let's try a more structured approach.
it's a redhat 7.1 , with sendmail .
- Are you responsable for this box (admin)?
- Is the box local to you, or remote?
- Is it a home box, or a dedicated server?
- Are the kernel, glibc and other core utilities upgraded to the most recent versions?
- What daemons are supposed to be running in the default runlevel (/etc/inittab)?
- What versions are those daemons at, and is that the latest version?
- Did you check out those daemons logs and system logs?
- Does it run a firewall? If so, did you check out the firewall logs? If it runs in a DMZ or otherwise behind a separate firewall, can you have access to those firewall reports?
- Did you verify the rpm's installed are OK?

everything was ok until i decided to reboot the machine because someone wasn't able to reach his mail box well after rebooting i got this message which say segmentation fault !
Did you reboot because you tested it yourself and could not connect to SMTP/POP3/IMAP/whatever else? Did all services seem down at that point?


A segfault means an application tried to access part of memory it is not allowed to.
While I'm trying to help you determine if this is due to errors wrt upgrading, it could also be malicious activity, in other words the box being compromised. If you (have no means to) answer most of the questions here, and if you are the admin, I would definately go for a more thorough approach, bring up a backup box and take this box down for investigation. If you're not the admin, it would be extremely wise at this point to alert him/her and hand over investigation and repairs.
 
Old 12-15-2003, 02:00 AM   #7
freelinuxcpp
Member
 
Registered: Jul 2003
Posts: 129

Original Poster
Rep: Reputation: 15
well , yes i m the "new" admin of this box
and i have a physical access to , ( it's local )
it's a sedicate server , which has many hundreds of clients (mail boxs)
, as i know no upgrade has been done since the first installation of the box
the daemons which has to run on rl5 are : sshd ,telnetd,pop3d,sendmail,ksyslog..... and sur system daemon now i was able to run pop3d and sendmail , but noway to use sshd , or even to ping a remote machine from this box , i always get this message : segmentation fault !
about the versions it's the same version provided by the main distro version , mean no upgrades at all
well of corse i checked the logs ( grep -r sendmail /var/log/ ) but i haven't anything which can tell me what's the origine of the problem , i passed a long time to scrol this logs ...)
the firewall rules a set (from a time ago ) are desabled now , cause i thought it's because of thoses rules , even if i tested them before apllying em)
well at the end this is what i decided to do ; to turn this big cow down and prepare an other machine for the same tacks , now my problem is how to port sendmail ( that i don't know much about it )MailBOXs to postscript , and also to port the Neomail ( our webmail ) at this time i m trying to surf over the web to find some doc about it , but all advices are welcom
thanx everybody & special thank for u unSpawn.
 
Old 12-15-2003, 06:34 AM   #8
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,353
Blog Entries: 55

Rep: Reputation: 3541Reputation: 3541Reputation: 3541Reputation: 3541Reputation: 3541Reputation: 3541Reputation: 3541Reputation: 3541Reputation: 3541Reputation: 3541Reputation: 3541
yes i m the "new" admin of this box.*as i know no upgrade has been done since the first installation of the box
OK, welcome to the won'drous world of legacy problems...

the daemons which has to run on rl5 are : sshd ,telnetd,pop3d,sendmail,ksyslog..... and sur system daemon now i was able to run pop3d and sendmail , but noway to use sshd , or even to ping a remote machine from this box , i always get this message : segmentation fault !
Not that it's your fault obviously, but an out of the box install of RHL 7.1 with NO upgrades done is WAY WAY WAY BAD.


now my problem is how to port sendmail
With all due respect, but that is NOT your problem. Don't get your priorities mixed up. You should investigate the box like it's been definately compromised. You will want to determine how far they have gotten, and investigate like the box was used as a springboard to others. If you do not want to do this for whatever reason (time, money, knowledge), simply assert the box was compromised, and inspect any system under your control as if the attacker had access to them.

If it's not down already, shut down the box, boot the RHL rescue cdr (boot the kernel from cdrom NOT THE DISK), make copies of the partitions to another box using "dd", then mount the partitions read-only and check binaries against the packages from cdrom. Make a list of files installed from the rpm database, and check that with a backup copy of that rpm database. Run a "find" on the powered off system to find any files that do not belong to rpm packages and inspect. Visually inspect authorisation files, and user shell files, system, daemon and firewall configuration and logfiles. Compile chkrootkit on another box and run it.

Post what you've got, else if it's a lot you can email me the URI of the tarball and we'll take it from there.



Good luck.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
what does Segmentation Fault mean ? baronlynx Linux - Newbie 10 10-25-2009 04:32 PM
yast segmentation fault, system freezing - nvidia driver at fault? BaltikaTroika SUSE / openSUSE 2 12-02-2005 09:34 AM
Help !!! Segmentation fault mola Linux - Software 3 06-23-2005 11:13 AM
Segmentation fault tejas15_10 Programming 9 06-20-2005 09:12 AM
Segmentation fault santhosh_o Programming 3 10-26-2004 05:45 AM


All times are GMT -5. The time now is 03:10 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration