Out of Memory & Relabeling
 

On 07/10/2012 10:26 AM, Tristan Santore wrote:
> Semodule can eat 100MB of memory easily, while it compiles modules. Have
> you got a swap space ? If yes, increase the memory limit in 128MB
> increments.

Hi Tristan,

Yes, I have 1GB of swap space (size was chosen by Anaconda) as I left
the default filesystem layout. It is strange indeed that, even with
lots of swap, I still got that error.

Regards,
Jorge
--
selinux mailing list
selinux@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/selinux

Out of Memory & Relabeling
 

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 07/10/2012 10:39 AM, Jorge Fábregas wrote:
> On 07/10/2012 10:26 AM, Tristan Santore wrote:
>> Semodule can eat 100MB of memory easily, while it compiles
>> modules. Have you got a swap space ? If yes, increase the memory
>> limit in 128MB increments.
>
> Hi Tristan,
>
> Yes, I have 1GB of swap space (size was chosen by Anaconda) as I
> left the default filesystem layout. It is strange indeed that,
> even with lots of swap, I still got that error.
>
> Regards, Jorge -- selinux mailing list
> selinux@lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/selinux
relabeling would not be executing semodule or rebuilding policy.

It is just running restorecon -R / or the equivalent. This should not
be using up huge amounts of memory.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk/8jUQACgkQrlYvE4MpobMDegCg4mSb8JUwFpW66LghlfTOcHil
k8AAoIdCHwcS01dvU9Lhf9K+B3Rd31f9
=KuzM
-----END PGP SIGNATURE-----
--
selinux mailing list
selinux@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/selinux

Out of Memory & Relabeling
 

On 07/10/2012 04:15 PM, Daniel J Walsh wrote:
> relabeling would not be executing semodule or rebuilding policy.

I see but, then, why is there a reference to "semodule" in the errors I
got?

> It is just running restorecon -R / or the equivalent. This should not
> be using up huge amounts of memory.

If I perform a manual "restorecon -R /" I don't get any errors.

--
Jorge
--
selinux mailing list
selinux@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/selinux

Out of Memory & Relabeling
 

On 07/10/2012 10:16 AM, Jorge Fábregas wrote:
> I've been running a minimally configured CentOS VM (with 256MB of
> memory). This morning I upgraded to 6.3 and prior to rebooting I
> created /.autorelabel which caused the following errors:
>
> http://imagebin.org/220184

Update: I just performed a new installation of RHEL 6.3 (not CentOS) and
could totally recreate the problem (with 256 MB of RAM).

--
Jorge
--
selinux mailing list
selinux@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/selinux

Out of Memory & Relabeling
 

On 07/10/2012 08:56 PM, Jorge Fábregas wrote:
> Update: I just performed a new installation of RHEL 6.3 (not CentOS) and
> could totally recreate the problem (with 256 MB of RAM).

Bug filed:

https://bugzilla.redhat.com/show_bug.cgi?id=839255

Regards,
Jorge
--
selinux mailing list
selinux@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/selinux

Out of Memory & Relabeling
 

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 07/10/2012 08:56 PM, Jorge Fábregas wrote:
> On 07/10/2012 10:16 AM, Jorge Fábregas wrote:
>> I've been running a minimally configured CentOS VM (with 256MB of
>> memory). This morning I upgraded to 6.3 and prior to rebooting I created
>> /.autorelabel which caused the following errors:
>>
>> http://imagebin.org/220184
>
> Update: I just performed a new installation of RHEL 6.3 (not CentOS) and
> could totally recreate the problem (with 256 MB of RAM).
>
> -- Jorge -- selinux mailing list selinux@lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/selinux
>
>
Strange I do not know what semodule would be doing here. BTW Picture states
Centos, not RHEL.

You could just remove the /.autorelabel, all the machine to boot in permissive
mode and then run the restorecon. I believe the script is just running
fixfiles -F restore, and on Fedora I do not see any semodule/semanage
commands. I am booting up a RHEL6 box to see if there is anything there.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk/9gs8ACgkQrlYvE4MpobNkxQCg0boJg1A6D4yfiPY59+C/2ZNQ
HUsAoN71p1C18Rpj4q4CLZ9hfaNHdYPX
=boo/
-----END PGP SIGNATURE-----
--
selinux mailing list
selinux@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/selinux

Out of Memory & Relabeling
 

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 07/11/2012 07:49 AM, Jorge Fábregas wrote:
> On 07/10/2012 08:56 PM, Jorge Fábregas wrote:
>> Update: I just performed a new installation of RHEL 6.3 (not CentOS) and
>> could totally recreate the problem (with 256 MB of RAM).
>
> Bug filed:
>
> https://bugzilla.redhat.com/show_bug.cgi?id=839255
>
> Regards, Jorge -- selinux mailing list selinux@lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/selinux
>
Most likely we will just close this, since we do not support this small of
memory system.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk/9gx0ACgkQrlYvE4MpobPY8QCeImZSJTogIXBdO32ej5/9V6KQ
2KcAn2CxEscyYHrT1bjkaFGjBoSddDJy
=864d
-----END PGP SIGNATURE-----
--
selinux mailing list
selinux@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/selinux

Out of Memory & Relabeling
 

On 07/11/2012 09:42 AM, Daniel J Walsh wrote:
> BTW Picture states Centos, not RHEL.

I quoted my original post where I stated it was from CentOS. The
attached screenshot in bugzilla is indeed from RHEL.

> You could just remove the /.autorelabel, all the machine to boot in permissive
> mode and then run the restorecon. I believe the script is just running
> fixfiles -F restore, and on Fedora I do not see any semodule/semanage
> commands.

Yes, there are a couple of workarounds. I just wanted to point this out
as it seemed very strange (and I've never seen it before).

> I am booting up a RHEL6 box to see if there is anything there.

Thanks.

--
Jorge
--
selinux mailing list
selinux@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/selinux

Out of Memory & Relabeling
 

On 07/11/2012 09:43 AM, Daniel J Walsh wrote:
> Most likely we will just close this, since we do not support this small of
> memory system.

I thought about that but considering that Red Hat is heaviliy promoting
the "cloud" (along with virtualization) I thought it was worth to report
it.

I bet there are thousands of VMs running out there with or less than
256MB of memory.

--
Jorge
--
selinux mailing list
selinux@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/selinux

Out of Memory & Relabeling
 

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 07/11/2012 10:40 AM, Jorge Fábregas wrote:
> On 07/11/2012 09:42 AM, Daniel J Walsh wrote:
>> BTW Picture states Centos, not RHEL.
>
> I quoted my original post where I stated it was from CentOS. The attached
> screenshot in bugzilla is indeed from RHEL.
>
>> You could just remove the /.autorelabel, all the machine to boot in
>> permissive mode and then run the restorecon. I believe the script is
>> just running fixfiles -F restore, and on Fedora I do not see any
>> semodule/semanage commands.
>
> Yes, there are a couple of workarounds. I just wanted to point this out as
> it seemed very strange (and I've never seen it before).
>
>> I am booting up a RHEL6 box to see if there is anything there.
>
> Thanks.
>
> -- Jorge -- selinux mailing list selinux@lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/selinux
>

Ok the problem is we are calling genhomedircon to make sure the homedirs get
labeled correctly. If you remove this file you should not see the problem.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk/9lpYACgkQrlYvE4MpobNnpACeOzI+0VzVthP/SGtXrcBFE9qG
PMYAoMeFiyavKQVOkCNFM8elkdkyAVPf
=cGTy
-----END PGP SIGNATURE-----
--
selinux mailing list
selinux@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/selinux