setroubleshootd high memory usage
 

Hi,


Â*


I have been tracking an issue with regard to setroubleshootd
for a month or so now, and am trying to work out why memory usage is so high.


I have followed this issue that was also discussed: http://www.redhat.com/archives/fedora-selinux-list/2007-September/msg00000.html


Â*


Top:


Â*PID USERÂ*Â*Â*Â*Â* PRÂ*
NIÂ* VIRTÂ* RESÂ* SHR S %CPU %MEMÂ*Â*Â* TIME+Â*
COMMAND


Â*2253 rootÂ*Â* Â*Â*Â*15Â*Â*
0Â* 585m 472m 3304 SÂ*Â*Â* 0 46.7Â*Â* 3:55.34
setroubleshootd


Â*


I use Webmin and this shows the following as ‘Running
Processes’ :


Â*


2253 root 600020 kB /usr/bin/python -E
/usr/sbin/setroubleshootd


Â*


Obviously this is extremely high memory usage for a process
(I only have 1 GB of RAM installed!)


Â*


WC:


wc /var/lib/setroubleshoot/audit_listener_database.xml


1313352Â* 4320305 66032275
/var/lib/setroubleshoot/audit_listener_database.xml


Â*


I have run audit2allow and pretty much cleared up the AVC
denials that were appearing, but I am still receiving one or two from ClamAV


Â*


SELAERT:


sealert -a /var/log/audit/audit.log


100% done


found 2 alerts in /var/log/audit/audit.log


Â*


First Alert:


Â*Â*Â* SELinux is preventing /usr/bin/clamdscan
(clamscan_t) "write" access to


Â*Â*Â* /var/webmin/sessiondb.pag (var_t).


Â*


Second Alert:


Â*Â*Â* SELinux is preventing /usr/bin/clamdscan
(clamscan_t) "connectto" access to


Â*Â*Â* /tmp/clamd.socket (initrc_t).


Â*


Â*


Thanks for any assistance,


Â*


Regards,


Â*


Paul


Â*


--


Paul
Lauria


Â*







--
fedora-selinux-list mailing list
fedora-selinux-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

setroubleshootd high memory usage
 

Paul Lauria wrote:

Hi,



I have been tracking an issue with regard to setroubleshootd for a month
or so now, and am trying to work out why memory usage is so high.


Please supply the setroubleshoot version. There have been many fixes
over the last year, I wonder if you're using an old version.

--
John Dennis <jdennis@redhat.com>

--
fedora-selinux-list mailing list
fedora-selinux-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

setroubleshootd high memory usage
 

setroubleshoot version: 1.8.11-4

--
Paul Lauria

-----Original Message-----
From: John Dennis [mailto:jdennis@redhat.com]
Sent: 21 May 2008 13:10
To: paul@pixellab.co.uk
Cc: fedora-selinux-list@redhat.com
Subject: Re: setroubleshootd high memory usage

Paul Lauria wrote:
> Hi,
>
>
>
> I have been tracking an issue with regard to setroubleshootd for a month
> or so now, and am trying to work out why memory usage is so high.

Please supply the setroubleshoot version. There have been many fixes
over the last year, I wonder if you're using an old version.
--
John Dennis <jdennis@redhat.com>

--
fedora-selinux-list mailing list
fedora-selinux-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

setroubleshootd high memory usage
 

Paul Lauria wrote:

setroubleshoot version: 1.8.11-4


You didn't say what OS you were running on, but I suggest you upgrade to the newer 2.x version.
--
John Dennis <jdennis@redhat.com>

--
fedora-selinux-list mailing list
fedora-selinux-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

setroubleshootd high memory usage
 

Its EL5.

Where can I get the newer 2.x version?

Thanks,

Paul

-----Original Message-----
From: John Dennis [mailto:jdennis@redhat.com]
Sent: 21 May 2008 15:11
To: paul@pixellab.co.uk
Cc: fedora-selinux-list@redhat.com
Subject: Re: setroubleshootd high memory usage

Paul Lauria wrote:
> setroubleshoot version: 1.8.11-4
>
You didn't say what OS you were running on, but I suggest you upgrade to the
newer 2.x version.
--
John Dennis <jdennis@redhat.com>

--
fedora-selinux-list mailing list
fedora-selinux-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

setroubleshootd high memory usage
 

Paul Lauria wrote:

Its EL5.

Where can I get the newer 2.x version?


For RHEL 5 you'll find it in the 5.2 update, which was recently released.

--
John Dennis <jdennis@redhat.com>

--
fedora-selinux-list mailing list
fedora-selinux-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-selinux-list