Problems with snmpd following update.

[David Rye]

Have run in to a problem on a couple of servers that I have updated in
the last week or so.

snmpd does not start after a reboot, the following log extract is from
/var/log/messages on server f4.

Jan 31 17:26:54 f4 acpid: acpid startup succeeded
Jan 31 17:26:54 f4 kernel: audit(1138728414.530:2): avc:  denied  {
execmem } fo
r  pid=5278 comm="snmpd" scontext=user_u:system_r:snmpd_t
tcontext=user_u:system
_r:snmpd_t tclass=process
Jan 31 17:26:54 f4 snmpd: /usr/sbin/snmpd: error while loading shared
libraries:
 libbeecrypt.so.6: cannot enable executable stack as shared object
requires: Per
mission denied
Jan 31 17:26:54 f4 snmpd: snmpd startup failed



Running 
execstack -q /usr/lib/libbeecrypt.so.6
gives
X /usr/lib/libbeecrypt.so.6

So the library is explisitly marked as requiring an executable stack.

looking at the obvious rpms yields the following

kernel-2.6.12-1.1381_FC3 		was kernel-2.6.11-1.14_FC3
net-snmp-5.2.1.2-FC3.1    		unchanged
net-snmp-libs-5.2.1.2-FC3.1		unchanged
selinux-policy-targeted-1.17.30-3.19	was
selinux-policy-targeted-1.17.30-2.96
libselinux-1.19.1-8			unchanged
beecrypt-3.1.0-6			unchanged


Any suggestions appreciated.

-- 
J. David Rye
http://www.roadrunner.uk.com
http://www.rha.org.uk
mailto://d.rye@roadtech.co.uk