| Summary: | [RHEL-6.7][selinux-policy] load_policy: page allocation failure. order:0, mode:0xd0 | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 6 | Reporter: | PaulB <pbunyan> |
| Component: | selinux-policy | Assignee: | Lukas Vrabec <lvrabec> |
| Status: | CLOSED CANTFIX | QA Contact: | BaseOS QE Security Team <qe-baseos-security> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 6.9 | CC: | dwalsh, kdump-team-bugs, lvrabec, mgrepl, mmalik, panand, pbunyan, plautrba, pmoore, pvrabec, qzhao, ruyang, ssekidde |
| Target Milestone: | rc | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2016-09-27 13:33:05 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Bug Depends On: | |||
| Bug Blocks: | 1359574, 1366045 | ||
|
Description
PaulB
2016-04-14 18:41:09 UTC
I don't think this is something for selinux-policy component. Paul, Can you look on this? Thank you. It appears that the kernel is having a difficult time allocating kernel memory for the SELinux policy load, I'm guessing this is due to memory pressure caused by the fact that kernel is a kdump recovery kernel and a good portion of the physical memory is reserved for dumping to disk. Is there any reason why we are loading the SELinux policy in the kdump kernel? This kernel boot instance is single user and exists only to write the memory image to disk, yes? If so, it seems like we could avoid loading the SELinux policy in this case and avoiding this problem completely. (In reply to Paul Moore from comment #4) > It appears that the kernel is having a difficult time allocating kernel > memory for the SELinux policy load, I'm guessing this is due to memory > pressure caused by the fact that kernel is a kdump recovery kernel and a > good portion of the physical memory is reserved for dumping to disk. > > Is there any reason why we are loading the SELinux policy in the kdump > kernel? This kernel boot instance is single user and exists only to write > the memory image to disk, yes? If so, it seems like we could avoid loading > the SELinux policy in this case and avoiding this problem completely. All, Adding kdump team for response... ruyang? Best, -pbunyan We load selinux policy when dumping to rootfs, the purpose is to labeling the dump files correctly. For the oom, Paul, can you retest with kdump.conf option "debug_mem_level 3" so that we can get who is using most of the memory? Thanks Dave Could you look on comment#6 and retest it with changed kdump.conf? Thanks. *** Bug 1301089 has been marked as a duplicate of this bug. *** *** Bug 1323086 has been marked as a duplicate of this bug. *** This looks more kernel bug then selinux-policy issue. Closing as CANTFIX and this should be fixed in #1379260. In reply to PaulB from comment #12) > ----------------------------------------------------------- > However, looking at the console log I do see the following: > ----------------------------------------------------------- > ---<-snip->--- > Loading SELINUX policy > load_policy invoked oom-killer: gfp_mask=0xd0, order=0, oom_adj=0, > oom_score_adj=0 Hi Paul, You should not see these messages with "Release 2.0.0-304". Following patch removes selinux policy load from kdump kernel. 98f374eeff89 mkdumprd: Remove load_selinux_policy script ~Pratyush (In reply to Pratyush Anand from comment #13) > In reply to PaulB from comment #12) > > ----------------------------------------------------------- > > However, looking at the console log I do see the following: > > ----------------------------------------------------------- > > ---<-snip->--- > > Loading SELINUX policy > > load_policy invoked oom-killer: gfp_mask=0xd0, order=0, oom_adj=0, > > oom_score_adj=0 > > Hi Paul, > > You should not see these messages with "Release 2.0.0-304". > > Following patch removes selinux policy load from kdump kernel. > > 98f374eeff89 mkdumprd: Remove load_selinux_policy script > > ~Pratyush Pratyush, You are correct. The Call Trace in comment #12 is no longer seen: host: dell-per320-02.khw.lab.eng.bos.redhat.com distro: RHEL-6.8 kernel: 2.6.32-642.el6 kexec-tools: 2.0.0-304.el6 See here: https://beaker.engineering.redhat.com/jobs/1558254 Best, -pbunyan |