On 2016-07-09 06:37, Andrei Borzenkov wrote:
09.07.2016 01:51, Carlos E. R. пишет:
I suppose that something is using something that is scheduled for removal, but what is using it?
(This is 13.1)
Something tries to set sysctl values. Obvious thing to check is /etc/sysctl.conf(.d). If these knobs are not explicitly mentioned there, I think using audit could work.
I had a look, but I don't know what might cause problems. This is what I have: cer@Telcontar:~> cat /etc/sysctl.conf # Disable response to broadcasts. # You don't want yourself becoming a Smurf amplifier. net.ipv4.icmp_echo_ignore_broadcasts = 1 # enable route verification on all interfaces net.ipv4.conf.all.rp_filter = 1 # disable IPv6 completely # net.ipv6.conf.all.disable_ipv6 = 1 # enable IPv6 forwarding #net.ipv6.conf.all.forwarding = 1 # increase the number of possible inotify(7) watches fs.inotify.max_user_watches = 65536 # avoid deleting secondary IPs on deleting the primary IP net.ipv4.conf.default.promote_secondaries = 1 net.ipv4.conf.all.promote_secondaries = 1 ### converted from /etc/sysconfig/sysctl at Sun, 19 Aug 2012 01:25:29 +0200 net.ipv4.tcp_syncookies = 1 net.ipv4.ip_forward = 0 net.ipv4.tcp_ecn = 0 kernel.sysrq = 0 net.ipv6.conf.all.forwarding = 0 cer@Telcontar:~> cat /etc/sysctl.d/99-sysctl.conf # Disable response to broadcasts. # You don't want yourself becoming a Smurf amplifier. net.ipv4.icmp_echo_ignore_broadcasts = 1 # enable route verification on all interfaces net.ipv4.conf.all.rp_filter = 1 # disable IPv6 completely # net.ipv6.conf.all.disable_ipv6 = 1 # enable IPv6 forwarding #net.ipv6.conf.all.forwarding = 1 # increase the number of possible inotify(7) watches fs.inotify.max_user_watches = 65536 # avoid deleting secondary IPs on deleting the primary IP net.ipv4.conf.default.promote_secondaries = 1 net.ipv4.conf.all.promote_secondaries = 1 ### converted from /etc/sysconfig/sysctl at Sun, 19 Aug 2012 01:25:29 +0200 net.ipv4.tcp_syncookies = 1 net.ipv4.ip_forward = 0 net.ipv4.tcp_ecn = 0 kernel.sysrq = 0 net.ipv6.conf.all.forwarding = 0 cer@Telcontar:~> -- Cheers / Saludos, Carlos E. R. (from 13.1 x86_64 "Bottle" at Telcontar)