on machine with CPU -> 100%, lots of avc's

Antonio Olivares olivares14031 at yahoo.com
Thu Feb 5 17:08:50 UTC 2009




--- On Thu, 2/5/09, Steve Grubb <sgrubb at redhat.com> wrote:

> From: Steve Grubb <sgrubb at redhat.com>
> Subject: Re: on machine with CPU -> 100%, lots of avc's
> To: fedora-test-list at redhat.com, olivares14031 at yahoo.com
> Date: Thursday, February 5, 2009, 7:44 AM
> On Wednesday 04 February 2009 07:23:03 pm Antonio Olivares
> wrote:
> > They are similar, difference is yours are all rw, mine
> I have only 1 rw :?
> >
> > [root at localhost ~]# ls -l /var/log/audit/
> > total 13476
> > -r-------- 1 root root 5242944 2008-03-12 08:16
> audit.log
> > -r-------- 1 root root 5242944 2008-03-12 08:16
> audit.log.1
> > -rw------- 1 root root 2140000 2008-03-12 08:17
> audit.log.2
> > -r-------- 1 root root 5242944 2008-03-12 08:14
> audit.log.3
> 
> Quick question...what audit package are you running?
> 
> -Steve

I applied a fix and now I can see the messages, but CPU is back to 100%

[root at localhost ~]# chmod u+w /var/log/audit/*
You have new mail in /var/spool/mail/root
[root at localhost ~]# service auditd restart
Stopping auditd:                                           [FAILED]
Starting auditd:                                           [  OK  ]
[root at localhost ~]# service auditd status
auditd (pid  3930) is running...
[root at localhost ~]# rpm -qa audit*
audit-libs-1.7.11-2.fc11.i386
audit-1.7.11-2.fc11.i386
audit-libs-python-1.7.11-2.fc11.i386

Now setroubleshoot daemon takes over :(

top - 11:08:12 up 33 min,  3 users,  load average: 1.91, 1.59, 1.21
Tasks: 139 total,   2 running, 137 sleeping,   0 stopped,   0 zombie
Cpu(s): 41.9%us, 58.1%sy,  0.0%ni,  0.0%id,  0.0%wa,  0.0%hi,  0.0%si,  0.0%st
Mem:    752216k total,   734372k used,    17844k free,    23728k buffers
Swap:  3114416k total,     2760k used,  3111656k free,   297596k cached

  PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+  COMMAND            
 3941 root      20   0 61072  40m 7236 R 68.4  5.5   3:34.77 setroubleshootd    
 2597 root      20   0  214m  59m 9124 S  8.7  8.2   5:42.78 Xorg               
 3039 olivares  20   0  247m  85m  23m S  7.7 11.6   3:15.94 firefox            
 3704 olivares  20   0 65156  15m 9336 S  3.5  2.2   1:34.40 npviewer.bin       
 2922 olivares  20   0 22620 9704 7392 S  1.6  1.3   0:31.03 gkrellm            
 2930 olivares  20   0 22620 9704 7392 S  1.6  1.3   0:30.66 gkrellm            
 2937 olivares  20   0 22620 9708 7388 S  1.6  1.3   0:30.59 gkrellm            
 2945 olivares  20   0 22684 9716 7392 S  1.6  1.3   0:30.59 gkrellm            
 2944 olivares  20   0 22680 9724 7392 S  1.3  1.3   0:30.46 gkrellm            
 4005 olivares  20   0  2428 1076  836 R  1.3  0.1   0:00.17 top                
 2887 olivares  20   0 62116  18m  13m S  1.0  2.5   0:05.72 kwin               
 2992 olivares  20   0  116m  39m  23m S  0.6  5.4   0:11.16 konqueror          
 3782 olivares  20   0 79748  19m  13m S  0.6  2.6   0:02.61 konsole            
[olivares at localhost ~]$ top                                                     
top - 11:08:15 up 33 min,  3 users,  load average: 1.92, 1.59, 1.21
Tasks: 139 total,   2 running, 137 sleeping,   0 stopped,   0 zombie
Cpu(s): 25.9%us, 30.4%sy,  0.0%ni, 39.9%id,  3.4%wa,  0.0%hi,  0.3%si,  0.0%st
Mem:    752216k total,   734124k used,    18092k free,    23740k buffers
Swap:  3114416k total,     2760k used,  3111656k free,   297596k cached

  PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+  COMMAND
 3941 root      20   0 61072  40m 7236 R 68.0  5.5   3:36.63 setroubleshootd
 2597 root      20   0  214m  59m 9124 S  5.1  8.2   5:42.98 Xorg
 3039 olivares  20   0  247m  85m  23m S  5.1 11.6   3:16.10 firefox
 4006 olivares  20   0  2424  976  740 R  5.1  0.1   0:00.07 top
 2937 olivares  20   0 22620 9708 7388 S  3.4  1.3   0:30.64 gkrellm
 2944 olivares  20   0 22680 9724 7392 S  3.4  1.3   0:30.51 gkrellm
 2922 olivares  20   0 22620 9704 7392 S  1.7  1.3   0:31.08 gkrellm
 2930 olivares  20   0 22620 9704 7392 S  1.7  1.3   0:30.70 gkrellm
 2945 olivares  20   0 22684 9716 7392 S  1.7  1.3   0:30.63 gkrellm
    1 root      20   0  2016  592  588 S  0.0  0.1   0:02.32 init
    2 root      15  -5     0    0    0 S  0.0  0.0   0:00.01 kthreadd
    3 root      RT  -5     0    0    0 S  0.0  0.0   0:00.00 migration/0
    4 root      15  -5     0    0    0 S  0.0  0.0   0:01.59 ksoftirqd/0




Regards,

Antonio


      




More information about the test mailing list