Hello,

I am running PaX on my 2.6.14-6 kernel and have the following error
which has proven to be quite troublesome:

Jun 19 10:37:40 nirvana kernel: grsec: From 66.249.92.174: denied
resource overstep by requesting 42024960 for RLIMIT_AS against limit
40000000 for /usr/bin/clamscan[clamdscan:10823] uid/euid:1010/1010
gid/egid:111/111, parent
/var/qmail/bin/qmail-scanner-queue.pl[qmail-scanner-q:13263]
uid/euid:1010/1010 gid/egid:111/111

This error then causes the process to consume 100% CPU indefinitely. I
have to manually kill the process for the scan to finish. Sometimes I
have 11 of them, which causes my load (which on average is about 0.15)
to jump up to 11+.

I found this that seems to indicate that ClamAV is doing something:
http://forums.grsecurity.net/viewtopic.php?p=5637

After searching through the code, I commented out all the setrlimit
calls, but to no avail. So, I then added setrlimit calls for RLIMIT_AS
and set it to RLIM_INFINITY, and this too has failed.

I'm really tired of manually killing these processes many times a
day... so it would be great if somone could provide some insight as to
how to get PaX and ClamAV working together.

Thanks,
Jon

--
________________________________________________________
Jon Keating                ICQ: 16325723
[EMAIL PROTECTED]               MSN: [EMAIL PROTECTED]
http://www.licq.org        GPG: 2290A71F
http://www.thejon.org      HOME: Minamiashigara, Japan
_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html

Reply via email to