Bug 1018628
| Summary: | RHEL7 ipa-server-install abrt on java in tomcat | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | Scott Poore <spoore> |
| Component: | pki-core | Assignee: | Endi Sukma Dewata <edewata> |
| Status: | CLOSED CURRENTRELEASE | QA Contact: | Asha Akkiangady <aakkiang> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | medium | ||
| Version: | 7.0 | CC: | alee, edewata, mkosek, nkinder, nsoman, rcritten |
| Target Milestone: | rc | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | pki-core-10.0.5-2.el7 | Doc Type: | Bug Fix |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2014-06-13 09:49:58 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Scott Poore
2013-10-13 23:51:02 UTC
Adding folks from pki-ca to CC to advise what this could mean. Also, I see this AVC denial during the crash:
type=PATH msg=audit(1381763445.068:607): item=1 name="abrt_checker_7013.log" objtype=CREATE
type=PATH msg=audit(1381763445.068:607): item=0 name="/usr/share/tomcat" inode=68508982 dev=fd:01 mode=040775 ouid=0 ogid=91 rdev=00:00 obj=system_u:object_r:usr_t:s0 objtype=PARENT
type=CWD msg=audit(1381763445.068:607): cwd="/usr/share/tomcat"
type=SYSCALL msg=audit(1381763445.068:607): arch=c000003e syscall=2 success=no exit=-13 a0=7fd68b7e2200 a1=241 a2=1b6 a3=0 items=2 ppid=1 pid=7651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="java-abrt" exe="/usr/lib/jvm/java-1.7.0-openjdk-1.7.0.40-2.4.2.6.el7.x86_64/jre/bin/java-abrt" subj=system_u:system_r:pki_tomcat_t:s0 key=(null)
type=AVC msg=audit(1381763445.068:607): avc: denied { write } for pid=7651 comm="java-abrt" name="tomcat" dev="dm-1" ino=68508982 scontext=system_u:system_r:pki_tomcat_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=dir
It looks like the crash is happening at shutdown, which is probably why you don't see an actual problem with the server running properly. We are failing to get the "LogMessages" resource bundle, which should be located in a LogMessages.properties file. I see this file in the pki source tree, but I'm not sure where it gets installed. It didn't seem to be a part of pki-base, pki-server, or pki-ca. The AVC just seems like it's unable to write out the abrt info from the crash. Upstream ticket: https://fedorahosted.org/pki/ticket/775 The resource bundles are packaged in pki-cmsbundle.jar which is distributed by pki-server. The issue was actually caused by multiple invocations of CMS.shutdown() due to incorrect placement of shutdown hook. Fixed upstream. Verified. I have not seen another abrt report email come through since this was fixed. Latest version checked: pki-ca-10.0.5-2.el7.noarch [root@ipaqa64vmg abrt]# abrt-cli list [root@ipaqa64vmg abrt]# [root@ipaqa64vmg ~]# rpm -q pki-ca pki-ca-10.0.5-2.el7.noarch [root@ipaqa64vmg ~]# cd /var/tmp/abrt/ [root@ipaqa64vmg abrt]# ls [root@ipaqa64vmg abrt]# cd /var/run/abrt [root@ipaqa64vmg abrt]# ls abrtd.pid abrt.socket saved_core_pattern [root@ipaqa64vmg abrt]# grep abrt /var/log/messages Dec 9 15:40:43 ipaqa64vmg yum[12400]: Installed: abrt-libs-2.1.7-5.el7.x86_64 Dec 9 15:40:44 ipaqa64vmg yum[12400]: Installed: abrt-2.1.7-5.el7.x86_64 Dec 9 15:40:44 ipaqa64vmg yum[12400]: Installed: abrt-tui-2.1.7-5.el7.x86_64 Dec 9 15:40:51 ipaqa64vmg yum[12524]: Installed: abrt-addon-ccpp-2.1.7-5.el7.x86_64 Dec 9 15:40:55 ipaqa64vmg abrtd: Searching for unprocessed dump directories Dec 9 15:40:55 ipaqa64vmg abrtd: Init complete, entering main loop [root@ipaqa64vmg abrt]# grep crash /var/log/messages Dec 9 15:36:42 ipaqa64vmg kernel: [ 0.000000] Command line: BOOT_IMAGE=/vmlinuz-3.10.0-54.el7.x86_64 root=/dev/mapper/rhel_ipaqa64vmg-root ro vconsole.font=latarcyrheb-sun16 rd.lvm.lv=rhel_ipaqa64vmg/swap vconsole.keymap=us rd.lvm.lv=rhel_ipaqa64vmg/root crashkernel=auto rhgb quiet LANG=en_US.UTF-8 Dec 9 15:36:42 ipaqa64vmg kernel: [ 0.000000] Reserving 129MB of memory at 736MB for crashkernel (System RAM: 2047MB) Dec 9 15:36:42 ipaqa64vmg kernel: [ 0.000000] Kernel command line: BOOT_IMAGE=/vmlinuz-3.10.0-54.el7.x86_64 root=/dev/mapper/rhel_ipaqa64vmg-root ro vconsole.font=latarcyrheb-sun16 rd.lvm.lv=rhel_ipaqa64vmg/swap vconsole.keymap=us rd.lvm.lv=rhel_ipaqa64vmg/root crashkernel=auto rhgb quiet LANG=en_US.UTF-8 Dec 9 15:36:42 ipaqa64vmg kernel: [ 0.593152] crash memory driver: version 1.1 [root@ipaqa64vmg abrt]# grep panic /var/log/messages Dec 9 15:36:42 ipaqa64vmg kernel: [ 1.813681] qxl 0000:00:02.0: registered panic notifier This request was resolved in Red Hat Enterprise Linux 7.0. Contact your manager or support representative in case you have further questions about the request. |