Page 1 of 1

RLIMIT_NOFILE messages in log

Posted: Tue Jan 07, 2014 4:41 pm
by GraFfiX
About every minute I am getting a block of errors like this:

Jan 7 15:43:16 server1 kernel: grsec: denied resource overstep by requesting 1024 for RLIMIT_NOFILE against limit 1024 for /var/ossec/bin/ossec-analysisd[ossec-analysisd:17914] uid/euid:492/492 gid/egid:492/492, parent /sbin/init[init:1] uid/euid:0/0 gid/egid:0/0

Any ideas on how I could correct this?

Re: RLIMIT_NOFILE messages in log

Posted: Wed Jan 08, 2014 11:59 am
by scott
Sure, make sure you've got the latest updates:

aum -u

and then update your security policy:

asl -s -f

Re: RLIMIT_NOFILE messages in log

Posted: Thu Jan 09, 2014 5:20 pm
by GraFfiX
Thanks, I thought I had already updated but apparently I had not.