Bug 189856

Summary: Latest SELinux Patch breaks Udev
Product: [Fedora] Fedora Reporter: Johannes Vieweg <johannes.vieweg>
Component: kernelAssignee: Eric Paris <eparis>
Status: CLOSED CURRENTRELEASE QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: 4CC: harald, jmorris, nphilipp, rees.ian, seg, wayward4now
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189856
Fixed In Version: FC5 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2006-08-23 16:12:19 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
Extract of /var/log/messages
none
Actual audit.log none

Description Johannes Vieweg 2006-04-25 08:58:32 UTC
Description of problem:

Since the last update of SELinux to version 1.27.1-2.28 causes heavy problems
with udev. The boot process takes 10 minutes from beginning to login. 
After the boot process, it takes about 5 minutes until the system is usable. The
 output of ps aux shows 3 udev processes which consumes 99% of CPU.

The output of /var/log/messages is attached.

How reproducible:


Steps to Reproduce:
1. Update selinux to 1.27.1-2.28.
2. Enable SELinux.
3. Reboot system.
  
Actual results:

The actual workaround for me is to disable SELinux.

Expected results:

Enabled SELinux and normal startup.

Comment 1 Johannes Vieweg 2006-04-25 08:58:32 UTC
Created attachment 128187 [details]
Extract of /var/log/messages

Comment 2 Harald Hoyer 2006-04-25 09:34:02 UTC
hm... reassigning to selinux

Comment 3 Ian Rees 2006-04-25 14:59:43 UTC
Referred here by "nphilipp" on #fedora (freenode.)

I experienced a similar issue on a new install of FC5 (first 'real' reboot after the system had been installed 
for a few days.)

Selecting 2.6.16 would cause the system to hang on 'Booting kernel.' 
2.6.15 would boot fine.

I disabled selinux (selinux=off) and it works fine for 2.6.16. 

udev version is 084-13

Comment 4 Daniel Walsh 2006-04-26 12:09:54 UTC
Are you seeing anything in the /var/log/audit/audit.log file?

There are no avc messages in the attached log file.  Does booting with
enforcing=0  on the command line work proberly?

Comment 5 James Morris 2006-04-27 02:52:06 UTC
I've just installed a fresh FC4 system and done a full update to current stable
releases, including selinux-policy-targeted-1.27.1-2.28.

I'm not seeing any problems at all.

Can you verify whether your entire system is updated to the latest packages?

Comment 6 Johannes Vieweg 2006-04-27 15:44:47 UTC
(In reply to comment #5)
> I've just installed a fresh FC4 system and done a full update to current 
stable
> releases, including selinux-policy-targeted-1.27.1-2.28.
> I'm not seeing any problems at all.
> Can you verify whether your entire system is updated to the latest packages?

The installed package version of selinux is:
selinux-policy-targeted-sources-1.27.1-2.28

The installed package version of udev is:
udev-071-0.FC4.3

The used kernel is 2.6.16-1.2096_FC4. I choosed several kernels, but without 
any changes. I guess it's a problem of the installed udev.
I started yum update again, but the udev package is not updated today.

Comment 7 Johannes Vieweg 2006-04-27 16:09:16 UTC
Created attachment 128311 [details]
Actual audit.log

Comment 8 Johannes Vieweg 2006-04-27 16:21:01 UTC
(In reply to comment #4)
> Are you seeing anything in the /var/log/audit/audit.log file?

I don't see anything special in the audit.log.

Comment 9 Dave Jones 2006-05-29 04:30:54 UTC
The reason of the slowdown is that the udev process is being killed & restarted
because for some reason it's using up all the available memory.

Is this still happening with all the latest updates applied ?


Comment 10 Johannes Vieweg 2006-05-29 15:25:53 UTC
(In reply to comment #9)
> Is this still happening with all the latest updates applied ?

Yes, the versions are still the same like in comment #6, except the kernel
version, now kernel 2.6.16-1.2111_FC4 is running. I checked if there is a newer
verion of udev (with repoquery --nvr) but I already installed the latest version
of udev.

Maybe only an upgrade to FC5 will help me.

Comment 11 Harald Hoyer 2006-05-29 15:29:35 UTC
hmm.. so I will update udev for FC4... oh my..

Comment 12 Rickey Moore 2006-05-30 04:21:30 UTC
I'm running kernel 2.6.16-1.2122_FC5 and still having the problem, which I did
not have with FC4

Comment 13 Harald Hoyer 2006-05-30 09:13:30 UTC
did you guys try to relabel everything?
# touch /.autorelabel
# reboot


Comment 14 Johannes Vieweg 2006-05-30 11:55:50 UTC
(In reply to comment #13)
> did you guys try to relabel everything?
> # touch /.autorelabel
> # reboot

Yes. I relabeld my system last night - without any changes of the udev behaviour. 



Comment 15 Eric Paris 2006-06-14 20:21:14 UTC
I'm pretty sure bug 174557 would have helped to decrease memory usuage of udev.
 From the log it looks like udev keeps getting killed because the system keeps
running out of memory.  But it also requires and upgrade of libselinux.  Are you
able to upgrade these 2 pieces?

Comment 16 Rickey Moore 2006-06-18 06:58:37 UTC
I re-installed with CD's to FC5 and overwrote everything from scratch
installation. That fixed the problem. :( 

Comment 17 Dave Jones 2006-07-29 04:54:29 UTC
Johannes, are you still having problems with the latest updates ?


Comment 18 Johannes Vieweg 2006-07-31 07:09:00 UTC
(In reply to comment #17)
> Johannes, are you still having problems with the latest updates ?
> 

Yes, I had these problems, so I decided to upgrade to FC5. The last update I did
was last monday with a normal 'yum update'.

Comment 19 Eric Paris 2006-08-04 16:16:57 UTC
I don't quite understand, do you still have problems with FC5 or are you saying
you had the problems until you upgraded to FC5?

Comment 20 Johannes Vieweg 2006-08-07 09:35:56 UTC
(In reply to comment #19)
> I don't quite understand, do you still have problems with FC5 or are you saying
> you had the problems until you upgraded to FC5?

I had the problems until I upgraded to FC5. Until the upgrade, I did a daily 
'yum update' in FC4, hoping the problem will be fixed. But the behaviour didn't
change. So I decided to leave FC4.