The SELinux is in passive mode so I can get the AVC denied messeges, but named-pkcs11 still crashes sometimes when systemctl reload named-pkcs11 is triggered manually or by logrotate with the detailed back trace listed in the initial email.

On 13/10/17 10:42, Alberto Colosi wrote:

SELinux in passive ? , you can put SETEnforce         OFF             in conf





------------------------------------------------------------------------
*From:* bind-users <bind-users-boun...@lists.isc.org> on behalf of Radu Pantiru <radu.pant...@devinfotech.co.uk>
*Sent:* Friday, October 13, 2017 10:49 AM
*To:* bind-users@lists.isc.org
*Subject:* Re: bind-pkcs11-9.9.4-51.el7.x86_64 using bind-dyndb-ldap in CentOS it triggering an assertion failure
I also want to add that SELinux is in permissive mode.

On 10/10/17 14:14, Radu Pantiru wrote:

I did request help with CentOS but my feeling is that you may be able to give me some information what happens at the code level.

It is not happening every time when reloading the named-pkcs11 service.

The backtrace:

(gdb) thread apply all bt

Thread 8 (Thread 0x7f4083cbc700 (LWP 21357)):
#0 pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185
#1 0x00007f40890bd4be in dispatch (manager=0x7f4089aa9010) at task.c:1065
#2 run (uap=0x7f4089aa9010) at task.c:1286
#3 0x00007f4087227e25 in start_thread (arg=0x7f4083cbc700) at pthread_create.c:308 #4 0x00007f408629f34d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113

Thread 7 (Thread 0x7f40844bd700 (LWP 21356)):
#0 pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185
#1 0x00007f40890bd4be in dispatch (manager=0x7f4089aa9010) at task.c:1065
#2 run (uap=0x7f4089aa9010) at task.c:1286
#3 0x00007f4087227e25 in start_thread (arg=0x7f40844bd700) at pthread_create.c:308 #4 0x00007f408629f34d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113

Thread 6 (Thread 0x7f40824b9700 (LWP 21360)):
#0 pthread_cond_timedwait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:238 #1 0x00007f40890d6e48 in isc_condition_waituntil (c=c@entry <mailto:c=c@entry>=0x7f4089aaa078, m=m@entry <mailto:m=m@entry>=0x7f4089aaa028, t=t@entry <mailto:t=t@entry>=0x7f4089aaa06c) at condition.c:66
#2 0x00007f40890c1ef3 in run (uap=0x7f4089aaa010) at timer.c:825
#3 0x00007f4087227e25 in start_thread (arg=0x7f40824b9700) at pthread_create.c:308 #4 0x00007f408629f34d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113

Thread 5 (Thread 0x7f40786d7700 (LWP 21875)):
#0 0x00007f4086294a3d in poll () at ../sysdeps/unix/syscall-template.S:81
#1 0x00007f407bbcebdb in poll (__timeout=<optimized out>, __nfds=<optimized out>, __fds=<optimized out>) at /usr/include/bits/poll2.h:46 #2 ldap_int_select (ld=<optimized out>, timeout=<optimized out>) at os-ip.c:1138 #3 0x00007f407bbb90bd in wait4msg (result=0x7f40786d6558, timeout=<optimized out>, all=2, msgid=4, ld=0x7f4070002b40) at result.c:312 #4 ldap_result (ld=0x7f4070002b40, msgid=4, all=all@entry <mailto:all=all@entry>=2, timeout=<optimized out>, result=result@entry <mailto:result=result@entry>=0x7f40786d65b8) at result.c:117 #5 0x00007f407bbe555c in ldap_sync_poll (ls=ls@entry <mailto:ls=ls@entry>=0x7f407000d720) at ldap_sync.c:879 #6 0x00007f4080124362 in ldap_sync_doit (inst=inst@entry <mailto:inst=inst@entry>=0x7f4089aacf40, conn=<optimized out>, filter_objcs=filter_objcs@entry <mailto:filter_objcs=filter_objcs@entry>=0x7f408013a550 "(|(objectClass=idnsZone) (objectClass=idnsForwardZone) (objectClass=idnsRecord))",
mode=mode@entry <mailto:mode=mode@entry>=3) at ldap_helper.c:4651
#7 0x00007f408012485f in ldap_syncrepl_watcher (arg=0x7f4089aacf40) at ldap_helper.c:4727 #8 0x00007f4087227e25 in start_thread (arg=0x7f40786d7700) at pthread_create.c:308 #9 0x00007f408629f34d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113

Thread 4 (Thread 0x7f4081cb8700 (LWP 21361)):
#0 0x00007f408629f923 in epoll_wait () at ../sysdeps/unix/syscall-template.S:81
#1 0x00007f40890ce916 in watcher (uap=0x7f4089aac010) at socket.c:3913
#2 0x00007f4087227e25 in start_thread (arg=0x7f4081cb8700) at pthread_create.c:308 #3 0x00007f408629f34d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113

Thread 3 (Thread 0x7f40834bb700 (LWP 21358)):
#0 pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185
#1 0x00007f40890bd4be in dispatch (manager=0x7f4089aa9010) at task.c:1065
#2 run (uap=0x7f4089aa9010) at task.c:1286
#3 0x00007f4087227e25 in start_thread (arg=0x7f40834bb700) at pthread_create.c:308 #4 0x00007f408629f34d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113

Thread 2 (Thread 0x7f4089ae5840 (LWP 21355)):
#0 0x00007f40861dc572 in do_sigsuspend (set=0x7ffe7ce76400) at ../sysdeps/unix/sysv/linux/sigsuspend.c:32
---Type <return> to continue, or q <return> to quit---
#1 __GI___sigsuspend (set=set@entry <mailto:set=set@entry>=0x7ffe7ce76400) at ../sysdeps/unix/sysv/linux/sigsuspend.c:46 #2 0x00007f40890c475c in isc__app_ctxrun (ctx0=ctx0@entry <mailto:ctx0=ctx0@entry>=0x7f40892efd20 <isc_g_appctx>) at app.c:695
#3 0x00007f40890c4b4c in isc__app_run () at app.c:722
#4 0x0000563558d91595 in main (argc=<optimized out>, argv=<optimized out>) at ./main.c:1118

Thread 1 (Thread 0x7f4082cba700 (LWP 21359)):
#0 0x00007f40861dc1f7 in __GI_raise (sig=sig@entry <mailto:sig=sig@entry>=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
#1 0x00007f40861dd8e8 in __GI_abort () at abort.c:90
#2 0x0000563558da1e7e in assertion_failed (file=<optimized out>, line=<optimized out>, type=<optimized out>, cond=<optimized out>) at ./main.c:222 #3 0x00007f408909d29a in isc_assertion_failed (file=file@entry <mailto:file=file@entry>=0x7f408948a2d4 "rdataset.c", line=line@entry <mailto:line=line@entry>=266, type=type@entry <mailto:type=type@entry>=isc_assertiontype_require, cond=cond@entry <mailto:cond=cond@entry>=0x7f408948a3a8 "rdataset->methods != ((void *)0)")
    at assertions.c:57
#4 0x00007f40893df828 in dns_rdataset_first (rdataset=<optimized out>) at rdataset.c:266 #5 0x00007f40893f155c in fctx_getaddresses (fctx=fctx@entry <mailto:fctx=fctx@entry>=0x7f4068192670, badcache=badcache@entry <mailto:badcache=badcache@entry>=isc_boolean_false) at resolver.c:2727 #6 0x00007f40893f20fd in fctx_try (fctx=fctx@entry <mailto:fctx=fctx@entry>=0x7f4068192670, retrying=retrying@entry <mailto:retrying=retrying@entry>=isc_boolean_false, badcache=badcache@entry <mailto:badcache=badcache@entry>=isc_boolean_false) at resolver.c:3062 #7 0x00007f40893f290c in fctx_start (task=<optimized out>, event=<optimized out>) at resolver.c:3444
#8 0x00007f40890bd6a6 in dispatch (manager=0x7f4089aa9010) at task.c:1116
#9 run (uap=0x7f4089aa9010) at task.c:1286
#10 0x00007f4087227e25 in start_thread (arg=0x7f4082cba700) at pthread_create.c:308 #11 0x00007f408629f34d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113

(gdb) frame 5

#5 0x00007f7adb9c255c in fctx_getaddresses (fctx=fctx@entry=0x7f7ac103e6e0, badcache=badcache@entry=isc_boolean_false) at resolver.c:2727

2727 for (result = dns_rdataset_first(&fctx->nameservers);

(gdb) list +

2722 isc_stdtime_get(&now);

2723

2724 INSIST(ISC_LIST_EMPTY(fctx->finds));

2725 INSIST(ISC_LIST_EMPTY(fctx->altfinds));

2726

2727 for (result = dns_rdataset_first(&fctx->nameservers);

2728      result == ISC_R_SUCCESS;

2729      result = dns_rdataset_next(&fctx->nameservers))

2730 {

2731 dns_rdataset_current(&fctx->nameservers, &rdata);

(gdb) frame 4

#4 0x00007f7adb9b0828 in dns_rdataset_first (rdataset=<optimized out>) at rdataset.c:266

266 REQUIRE(rdataset->methods != NULL);

thank you for your help!



_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to