[Bug 429484] New: apparmor/logprof freezes machine
https://bugzilla.novell.com/show_bug.cgi?id=429484 User daniele@sase.de added comment https://bugzilla.novell.com/show_bug.cgi?id=429484#c1 Summary: apparmor/logprof freezes machine Product: openSUSE 11.0 Version: Final Platform: Other OS/Version: openSUSE 11.0 Status: NEW Severity: Normal Priority: P5 - None Component: AppArmor AssignedTo: jjohansen@novell.com ReportedBy: daniele@sase.de QAContact: qa@suse.de Found By: --- I could reproduce that updating profiles with logprof freezes the machine. there's no logentry, kernel-oops etc. Unloading apparmor sometimes freezes the machine too. uname: Linux spackus 2.6.25.16-0.1-pae #1 SMP 2008-08-21 00:34:25 +0200 i686 athlon i386 GNU/Linux I dont know how to locate the bug. I heard of a SLES-bug describing similar problems, but couldn't find it. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=429484 User jjohansen@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=429484#c1 John Johansen <jjohansen@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED --- Comment #1 from John Johansen <jjohansen@novell.com> 2008-09-24 10:54:31 MDT --- Confirmed. There is a kernel locking bug that can cause the machine to freeze on profile replacement/removal, if all the loaded profiles names are greater than a page in size and the replacement/removal is done after looking at cat /sys/kernel/security/appamor/profiles or rcapparmor status rcapparmor restart rcapparmor stop The initial profile load should not cause problems, and profile replacement/removal is safe from the parser, as long as the above commands have not been done. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=429484 User daniele@sase.de added comment https://bugzilla.novell.com/show_bug.cgi?id=429484#c2 --- Comment #2 from Daniele Frijia <daniele@sase.de> 2008-09-24 11:44:48 MDT --- Is someone working on a bugfix? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=429484 User jjohansen@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=429484#c3 --- Comment #3 from John Johansen <jjohansen@novell.com> 2008-09-25 11:55:43 MDT --- Yes, it is being tested right now. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=429484 User jeffm@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=429484#c5 Jeff Mahoney <jeffm@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |NEEDINFO Info Provider| |daniele@sase.de --- Comment #5 from Jeff Mahoney <jeffm@novell.com> 2009-02-11 13:05:14 MST --- Are you able to reproduce this with 11.1? John has left Novell, and many of his bugs have been fixed but not documented as such. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=429484 User daniele@sase.de added comment https://bugzilla.novell.com/show_bug.cgi?id=429484#c6 Daniele Frijia <daniele@sase.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |ASSIGNED Info Provider|daniele@sase.de | --- Comment #6 from Daniele Frijia <daniele@sase.de> 2009-02-11 13:18:10 MST --- It's a machine which I can't reboot if it freezes (only remote access, without serial console). So I can't reproduce it, sorry... Is there someone else with the bug? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=429484 User jeffm@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=429484#c7 --- Comment #7 from Jeff Mahoney <jeffm@novell.com> 2009-03-06 09:53:03 MST --- Created an attachment (id=277733) --> (https://bugzilla.novell.com/attachment.cgi?id=277733) [PATCH] AppArmor: Fix outputting of loaded profiles > PAGE_SIZE The basics of the bug are as follows The profile listing in apparmorfs is broken, so that it will only output entries that fit on a single page, if there are more profiles than can be listed in a page worth of memory it bails but when it bails it leaves some spinlocks held. :( This breaks, profile listing, replacement and removal if done from the init scripts. Manual profile replacement and removal as done by the utils will still work as long a profile listing has not been done previously. Fortunately for this bug only surfaces when a rather large number of profiles are present, somewhere in the 60-70 profile/hat range. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=429484 User jeffm@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=429484#c8 Jeff Mahoney <jeffm@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |FIXED --- Comment #8 from Jeff Mahoney <jeffm@novell.com> 2009-03-06 09:55:18 MST --- I've committed the fix to the repo. It will be part of the next update. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠novell.com