Asterisk Executable Suddenly About 40KB Larger – Modules (Andres)

Home » Asterisk Users » Asterisk Executable Suddenly About 40KB Larger – Modules (Andres)
Asterisk Users 1 Comment

this:

pam_tty_audit.so to understand who is doing this:
r-scientific-linux/

Thanks I’ll keep that in mind.

Just to report back, stopping pre-linking as detailed yesterday and setting immutable with chattr on the Asterisk executable on the Head Office box here appears to have solved the problem. The box did not crash this morning as it did the previous two days and is working fine… strange, but good.

Previous to the problem starting on Tuesday, the box had been running fine for about three years 24/7 – so I might still have some kind of compromise going on.

Anyway thanks for the assistance everyone

Regards

Stefan

One thought on - Asterisk Executable Suddenly About 40KB Larger – Modules (Andres)

  • What you may want to consider is if you have a network management system such as Nagios is create a service that checks the size of the binary every
    5 minutes. You’re notified if the size goes over a certain threshold. You can also take the perf data and graph it using one of the many Nagios graphing tools available. You can even use something like Munin for a task like this. I couldn’t get along without this. On some PBX’s I have, I
    monitor over 600 different metrics spread out every 1,5,10,15,30, and 60
    minutes. Because they’re spread out, the load average from these checks is zero. Just a suggestion. Regards;
    John

    —–Original Message—