[selinux] Re: setroubleshootd CPU usage

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 10/03/2011 07:16 PM, Robin Lee Powell wrote:
> On Tue, Sep 27, 2011 at 08:51:51AM -0400, Daniel J Walsh wrote:
>> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
>> 
>> On 09/26/2011 07:26 PM, Robin Lee Powell wrote:
>>> 
>>> http://teddyb.org/~rlpowell/media/public/setroubleshoot.strace.txt
>>>
>>>
>>> 
is the trace for setroubleshootd dealing with what seems to me
>>> to be a fairly simple AVC.  What's interesting is that it's 
>>> using 100% of the CPU doing that.  Which is a problem since the
>>> message is being generated once a second or so, and taking 20+
>>> seconds of 100% CPU to process. :)
>>> 
>>> Just thought y'all might want to look in to that.
>> 
>> Not sure what you are proposing?
> 
> I wasn't proposing anything; it just seemed really exceptional. 
> When *all* of my CPU is going to one program, I kind of take 
> notice.
> 
>> Do you see one particular plugin that is taking to much CPU?
> 
> I don't have any idea how I would tell.
> 
> -Robin -- selinux mailing list selinux at lists.fedoraproject.org 
> https://admin.fedoraproject.org/mailman/listinfo/selinux


Are you generating a large amount of AVCs?

Send me a private email with a compressed output from.

ausearch -m avc
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk6LIscACgkQrlYvE4MpobOToQCg0uOfkiHFq5Rbn5qLSGcdmQ0o
jQQAn2qiEJbwj1hda7M3cop+sCmq8YZ5
=jwcy
-----END PGP SIGNATURE-----