Bug 1318817

Summary: sediff consumes too much memory
Product: Red Hat Enterprise Linux 7 Reporter: Milos Malik <mmalik>
Component: setoolsAssignee: Petr Lautrbach <plautrba>
Status: CLOSED WONTFIX QA Contact: Milos Malik <mmalik>
Severity: medium Docs Contact:
Priority: medium    
Version: 7.3CC: lvrabec, mgrepl, mmalik, plautrba
Target Milestone: rcKeywords: RFE
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
: 1318822 (view as bug list) Environment:
Last Closed: 2016-04-27 13:39:01 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Milos Malik 2016-03-17 22:52:22 UTC 
Description of problem:
 * sediff gets killed by OOM killer when --allow or --dontaudit or --stats parameter is used

Version-Release number of selected component (if applicable):
setools-console-3.3.8-1.el7.x86_64

How reproducible:
always

Steps to Reproduce:
# sediff --allow /etc/selinux/targeted/policy/policy.29 \; /etc/selinux/targeted/policy/policy.30 
Killed
# echo $?
137
# dmesg | tail -n 2
[ 4033.789560] Out of memory: Kill process 5430 (sediff) score 672 or sacrifice child
[ 4033.789561] Killed process 5430 (sediff) total-vm:1360016kB, anon-rss:569884kB, file-rss:0kB
#

Actual results:
 * sediff is killed by OOM killer because it consumed too much memory

Expected results:
 * sediff works as expected and terminates correctly
Comment 1 Milos Malik 2016-03-18 08:29:52 UTC 
sediff finished on a ppc64 machine equipped by 16GB RAM. The peak of memory allocated by the sediff process in about 7GB.
Comment 2 Petr Lautrbach 2016-03-18 08:37:06 UTC 
I'm not sure we can do it for RHEL-7.3. It would need an upstream patch while setools3 is considered mature and should be obsoleted soon by setools4.

As a workaround, if you need to do memory demanding operations, just raise amount of memory attached to your VMs.