upss.. reason="memory violation" sig=11 => segfault htcondor

[lejeczek]

hi fellas

I don't want to disable se, I cannot find booleans, there is 
no domain for htcondor I think.
How do I let my htcondor through?
with se:

condor_submit[29217]: segfault at 0 ip           (null) sp 
00007ffd7dfa61c8

type=ANOM_ABEND msg=audit(1495536871.977:1484): auid=2501 
uid=1177 gid=513 ses=63 
subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 
pid=1532 comm="condor_submit" reason="memory violation" sig=11

disable se and works.

many thanks.
L.

[Lukas Vrabec]

On 05/23/2017 12:56 PM, lejeczek wrote:
> hi fellas
>
> I don't want to disable se, I cannot find booleans, there is no domain
> for htcondor I think.
> How do I let my htcondor through?
> with se:
>
> condor_submit[29217]: segfault at 0 ip           (null) sp 00007ffd7dfa61c8
>
> type=ANOM_ABEND msg=audit(1495536871.977:1484): auid=2501 uid=1177
> gid=513 ses=63
> subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=1532
> comm="condor_submit" reason="memory violation" sig=11
>
> disable se and works.
>
> many thanks.
> L.
> _______________________________________________
> selinux mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]

Hi,

Could you reproduce the scenario and then attach output of:
# ausearch -m AVC,USER_AVC -ts recent

Thanks,
Lukas.

[lejeczek]

On 23/05/17 12:07, Lukas Vrabec wrote:
> On 05/23/2017 12:56 PM, lejeczek wrote:
> > hi fellas
> >
> > I don't want to disable se, I cannot find booleans, there 
> > is no domain
> > for htcondor I think.
> > How do I let my htcondor through?
> > with se:
> >
> > condor_submit[29217]: segfault at 0 ip           (null) 
> > sp 00007ffd7dfa61c8
> >
> > type=ANOM_ABEND msg=audit(1495536871.977:1484): auid=2501 
> > uid=1177
> > gid=513 ses=63
> > subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 
> > pid=1532
> > comm="condor_submit" reason="memory violation" sig=11
> >
> > disable se and works.
> >
> > many thanks.
> > L.
> > _______________________________________________
> > selinux mailing list -- [e-mail]
> > To unsubscribe send an email to 
> > [e-mail]
>
> Hi,
>
> Could you reproduce the scenario and then attach output of:
> # ausearch -m AVC,USER_AVC -ts recent
>
> Thanks,
> Lukas.

hi,
ausearch as above finds nothing, with only "recent" all the 
grep condor finds is that one line.
Should I include a few more lines before that condor one?