From: Willy Tarreau <w@1wt.eu>
To: OGAWA Hirofumi <hirofumi@mail.parknet.co.jp>
Cc: Jan Engelhardt <jengelh@medozas.de>,
linux-kernel@vger.kernel.org, linux-mm@kvack.org
Subject: Re: bad pmd ffff810000207808(9090909090909090).
Date: Wed, 7 May 2008 01:21:05 +0200 [thread overview]
Message-ID: <20080506232105.GA22457@1wt.eu> (raw)
In-Reply-To: <87abj3nibc.fsf@duaron.myhome.or.jp>
On Wed, May 07, 2008 at 08:06:47AM +0900, OGAWA Hirofumi wrote:
> Willy Tarreau <w@1wt.eu> writes:
>
> >> I see. I'm not sure, but I didn't notice this soon, maybe it worked as
> >> almost usual.
> >
> > I got immediate same feeling as Jan here. It looks very much like someone
> > has tried to inject code into your system. The problem is that you don't
> > know if this finally succeeded. Maybe some backdoor is now installed in
> > your kernel. If I were you, I would isolate the machine, reboot it on CD
> > and check MD5s (particularly the ones of the kernel and modules) before
> > rebooting it.
>
> Hm.. I've checked md5sum as far as I can do (/var/lib/dpkg/info/*.md5sums).
> It seems to have no difference except data files.
>
> And this machine is in back of firewall of other machine, and the kernel
> is builded from source each every day or a hour or such.
>
> So, it is unlikely...
OK. At least it was worth checking!
Regards,
Willy
WARNING: multiple messages have this Message-ID (diff)
From: Willy Tarreau <w@1wt.eu>
To: OGAWA Hirofumi <hirofumi@mail.parknet.co.jp>
Cc: Jan Engelhardt <jengelh@medozas.de>,
linux-kernel@vger.kernel.org, linux-mm@kvack.org
Subject: Re: bad pmd ffff810000207808(9090909090909090).
Date: Wed, 7 May 2008 01:21:05 +0200 [thread overview]
Message-ID: <20080506232105.GA22457@1wt.eu> (raw)
In-Reply-To: <87abj3nibc.fsf@duaron.myhome.or.jp>
On Wed, May 07, 2008 at 08:06:47AM +0900, OGAWA Hirofumi wrote:
> Willy Tarreau <w@1wt.eu> writes:
>
> >> I see. I'm not sure, but I didn't notice this soon, maybe it worked as
> >> almost usual.
> >
> > I got immediate same feeling as Jan here. It looks very much like someone
> > has tried to inject code into your system. The problem is that you don't
> > know if this finally succeeded. Maybe some backdoor is now installed in
> > your kernel. If I were you, I would isolate the machine, reboot it on CD
> > and check MD5s (particularly the ones of the kernel and modules) before
> > rebooting it.
>
> Hm.. I've checked md5sum as far as I can do (/var/lib/dpkg/info/*.md5sums).
> It seems to have no difference except data files.
>
> And this machine is in back of firewall of other machine, and the kernel
> is builded from source each every day or a hour or such.
>
> So, it is unlikely...
OK. At least it was worth checking!
Regards,
Willy
--
To unsubscribe, send a message with 'unsubscribe linux-mm' in
the body to majordomo@kvack.org. For more info on Linux MM,
see: http://www.linux-mm.org/ .
Don't email: <a href=mailto:"dont@kvack.org"> email@kvack.org </a>
next prev parent reply other threads:[~2008-05-06 23:21 UTC|newest]
Thread overview: 12+ messages / expand[flat|nested] mbox.gz Atom feed top
2008-05-06 12:00 bad pmd ffff810000207808(9090909090909090) OGAWA Hirofumi
2008-05-06 12:00 ` OGAWA Hirofumi
2008-05-06 12:35 ` Jan Engelhardt
2008-05-06 12:35 ` Jan Engelhardt
2008-05-06 12:52 ` OGAWA Hirofumi
2008-05-06 12:52 ` OGAWA Hirofumi
2008-05-06 19:50 ` Willy Tarreau
2008-05-06 19:50 ` Willy Tarreau
2008-05-06 23:06 ` OGAWA Hirofumi
2008-05-06 23:06 ` OGAWA Hirofumi
2008-05-06 23:21 ` Willy Tarreau [this message]
2008-05-06 23:21 ` Willy Tarreau
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20080506232105.GA22457@1wt.eu \
--to=w@1wt.eu \
--cc=hirofumi@mail.parknet.co.jp \
--cc=jengelh@medozas.de \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-mm@kvack.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.