I am running a secure kernel version of Mandrake 9.2 (security level 4).

When I open a browser page that uses Java scripts or try to run Java
programs from the command-line, the kernel kills the app.

Below are 2 examples from the /var/log/messages file. One is from
Netscape 7.1 being killed by the kernel and the other is from a Java
program being killed by the kernel.

Does anyone know how to adjust the kernel resource allocations, so
that the kernel won't kill my user apps.








example 1:

Here is /var/log/messages after netscape is kill by the kernel...

--snip--
May 2 18:13:42 lt kernel: grsec: signal 11 sent to (java_vm:22598)
UID(501) EUID(501), parent (netscape-bin:32224) UID(501) EUID(501)

May 2 18:13:42 lt kernel: grsec: signal 11 sent to (java_vm:22598)
UID(501) EUID(501), parent (netscape-bin:32224) UID(501) EUID(501)

May 2 18:13:42 lt kernel: grsec: signal 6 sent to (java_vm:22598)
UID(501) EUID(501), parent (netscape-bin:32224) UID(501) EUID(501)

May 2 18:13:42 lt kernel: grsec: attempted resource overstep by
requesting 4096 for RLIMIT_CORE against limit 0 by (java_vm:22598)
UID(501) EUID(501),parent (netscape-bin:32224) UID(501) EUID(501)
--end snip--






example 2:

The below example of the kernel killing a Java program...

$ java FileViewer
#
# HotSpot Virtual Machine Error, Internal Error
# Please report this error at
# http://java.sun.com/cgi-bin/bugreport.cgi
#
# Java VM: Java HotSpot(TM) Client VM (1.4.2-b28 mixed mode)
#
# Error ID: 4F533F4C494E55580E43505001C9
#

Heap at VM Abort:
Heap


****************
Another exception has been detected while we were handling last error.
Dumping information about last error:
ERROR REPORT FILE = (N/A)
PC = 0x48e68a88
SIGNAL = 11
FUNCTION NAME = (N/A)
OFFSET = 0xFFFFFFFF
LIBRARY NAME = (N/A)
Please check ERROR REPORT FILE for further information, if there is any.
Good bye.
Abort



/var/log/mesages

May 2 19:17:21 lt kernel: grsec: signal 11 sent to (java:28050)
UID(501) EUID(501), parent (ksh:15836) UID(501) EUID(501)

May 2 19:17:21 lt kernel: grsec: signal 11 sent to (java:28050)
UID(501) EUID(501), parent (ksh:15836) UID(501) EUID(501)

May 2 19:17:21 lt kernel: grsec: signal 6 sent to (java:28050) UID(501)
EUID(501), parent (ksh:15836) UID(501) EUID(501)

May 2 19:17:21 lt kernel: grsec: attempted resource overstep by
requesting 4096 for RLIMIT_CORE against limit 0 by (java:28050) UID(501)
EUID(501), parent (ksh:15836) UID(501) EUID(501)