Bug 166179 - fixfiles may run find across /home nfs dirs, hanging policy rebuild
Summary: fixfiles may run find across /home nfs dirs, hanging policy rebuild
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 4
Classification: Red Hat
Component: policycoreutils
Version: 4.0
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
: ---
Assignee: Daniel Walsh
QA Contact: Ben Levenson
URL:
Whiteboard:
Depends On:
Blocks: 156322
TreeView+ depends on / blocked
 
Reported: 2005-08-17 20:06 UTC by Jon Orris
Modified: 2007-11-30 22:07 UTC (History)
0 users

Fixed In Version: RHBA-2005-645
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2005-10-05 16:35:00 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2005:645 0 qe-ready SHIPPED_LIVE SELinux policy bug fix update 2005-10-05 04:00:00 UTC

Description Jon Orris 2005-08-17 20:06:09 UTC
Description of problem:
Discovered testing targeted policy updates when rpm transaction appeard to hang.
 The cause was a find call in fixfiles running over very large nfs directories
mounted off /home. The list of directories to search is created at line 63 in
fixfiles:

/usr/bin/diff $PREFC $FC | grep '^[<>]'|cut -c3-| grep ^/ | \
	sed -r -e 's,[[:blank:]].*,,g' \
               -e 's|\(([/[:alnum:]]+)\)\?|{\1,}|g' \

This will include /home directories, which the targeted policy should not be
touching on update in any case. If /home includes large nfs dirs, this will
cause fixfiles to run for a very long time, possibly several hours.

Dan proposed adding an exclusion for /home, as follows:

/usr/bin/diff $PREFC $FC | grep '^[<>]'|cut -c3-| grep ^/ | grep -v ^/home | \
	sed -r -e 's,[[:blank:]].*,,g' \
	    -e 's|\(([/[:alnum:]]+)\)\?|{\1,}|g' \

Comment 7 Daniel Walsh 2005-08-19 18:07:34 UTC
Fixed in policycoreutils-1.18.1-4.5


Comment 8 Red Hat Bugzilla 2005-10-05 16:35:00 UTC
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHBA-2005-645.html



Note You need to log in before you can comment on or make changes to this bug.