Segmentation fault

mr_empty · 12-08-2006, 02:03 AM

Hi all,
i had make a web server using FC6, and one day i restart the server i got a lot of segmentation fault, something like pointing to dev/null.
so I tried FC4 and i re-partition the filesystem.
dev/sda /boot
dev/sda5 /home
dev/sda6 /swap
dev/sda7 /

the segmentation fault occur again, and i cannot reboot the server.
did anyone encounter such kind of problem?Thanks

Youri · 12-08-2006, 04:03 AM

dev/sda /boot

am i wrong or shouldn't this be

dev/sda1(or any other number) /boot

dev/sda is a device pointer to the actual drive and not a partition on that drive, and only the partitions is what you want to mount, right?

Michael Johnson · 12-08-2006, 07:40 AM

A segmentation fault may be caused by misaligned data. This is a bug in the software or it may be faulty memory. Do a test of your memory. It may also be the memory management system has a problem (new motherboard needed). It may also be a read error from your hard drive, caused by a bad sector or something. I suggest the first thing is to "e2fsck -f /dev/sda?" to check the file sytem on all partitions. Make sure the partitions are not mounted. Best if you use a live cd Linux to do this.

mr_empty · 12-11-2006, 03:19 AM

when i read the log i found that there is someone hack on my server, and then i found the segmentation fault on the next day after the hacking. so i guess it should be someone ruining my server, maybe i need to change a more complicated root password.

chrism01 · 12-11-2006, 06:37 PM

Frankly, if you are sure you've been hacked, the only safe solution is a clean re-install from known good resources.
You could try http://www.rootkit.nl/projects/rootkit_hunter.html and/or http://www.chkrootkit.org/ but there's no guarantee of 100% detection/cleanup.
You should definitely (next time) use secure passwords, do not allow direct ssh into root and do run tripwire (should come with your distro) and look at using http://www.bastille-linux.org/ to lock it down.

Fadoksi · 12-19-2006, 09:35 AM

You were hacked again? (The post before with SucKIT on Redhat 6.1) Maybe some crackers have found you to be easy target. You should start doing something for your box's security.