[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <CAHsHv-bG-F9uRj_H9xzQ9s7e2OARLNDV-1V5pFHpmSOcaQYCWQ@mail.gmail.com>
Date: Tue, 26 Mar 2019 09:53:05 +0100
From: bryn1u85 <m.bryn1u@...il.com>
To: lkrg-users@...ts.openwall.com
Subject: ON process[6291 | dockerd] has corrupted 'off' flag -> Trying to kill
process[dockerd | 6291]!
Hey guys,
I have installed docker and run services, after that im getting some
message in dmesg. It looks like LKRG is trying to kill docker process. It
shoul be like that or it's false positive ?
[71053.959984] [p_lkrg] <Exploit Detection> ON process[6291 | dockerd] has
> corrupted 'off' flag => 0x29bbff7dee24682 (normalization via
> 0x14ddffbef712341)!
> [71053.960051] [p_lkrg] <Exploit Detection> Trying to kill process[dockerd
> | 6291]!
> [71053.960447] [p_lkrg] <Exploit Detection> ON process[6291 | dockerd] has
> corrupted 'off' flag => 0x29bbff7dee24682 (normalization via
> 0x14ddffbef712341)!
> [71053.960513] [p_lkrg] <Exploit Detection> Trying to kill process[dockerd
> | 6291]!
> [156062.762482] [p_lkrg] <Exploit Detection> ON process[31600 | dockerd]
> has corrupted 'off' flag => 0x29bbff7dee24682 (normalization via
> 0x14ddffbef712341)!
> [156062.762537] [p_lkrg] <Exploit Detection> Trying to kill
> process[dockerd | 31600]!
> [156062.762703] [p_lkrg] <Exploit Detection> ON process[31600 | dockerd]
> has corrupted 'off' flag => 0x29bbff7dee24682 (normalization via
> 0x14ddffbef712341)!
> [156062.762743] [p_lkrg] <Exploit Detection> Trying to kill
> process[dockerd | 31600]!
> [156069.458008] [p_lkrg] <Exploit Detection> ON process[11449 | dockerd]
> has corrupted 'off' flag => 0x29bbff7dee24682 (normalization via
> 0x14ddffbef712341)!
> [156069.458051] [p_lkrg] <Exploit Detection> Trying to kill
> process[dockerd | 11449]!
> [156069.458246] [p_lkrg] <Exploit Detection> ON process[11449 | dockerd]
> has corrupted 'off' flag => 0x29bbff7dee24682 (normalization via
> 0x14ddffbef712341)!
> [156069.458314] [p_lkrg] <Exploit Detection> Trying to kill
> process[dockerd | 11449]!
Content of type "text/html" skipped
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
