Well, for awhile it seemed that I was getting regular sealert warnings
(the "star" in notification taskbar) but now I no longer received it. I
noticed that setroubleshoot was running at 85-95% of CPU load so
I killed it along with sealert processes and that brought the CPU load
WAY down.

What can I do to fix this?


No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.5.503 / Virus Database: 269.17.1/1181 - Release Date: 12/11/2007 5:05 PM


--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list

At 6:01 PM -0800 12/12/07, Daniel B. Thurman wrote:
>Well, for awhile it seemed that I was getting regular sealert warnings
>(the "star" in notification taskbar) but now I no longer received it. I
>noticed that setroubleshoot was running at 85-95% of CPU load so
>I killed it along with sealert processes and that brought the CPU load
>WAY down.
>
>What can I do to fix this?

Reboot, or log out and back in, or restart what you stopped.
--
__________________________________________________ __________________
TonyN.:' <mailto:tonynelson@georgeanelson.com>
' <http://www.georgeanelson.com/>

--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list

Tony Nelson wrote:
>
>Reboot, or log out and back in, or restart what you stopped.
>

Yup. I did that. I even /.autorelabel just in case.
setroubleshoot went right back into CPU overload.

Why me!?!?!?

No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.5.503 / Virus Database: 269.17.1/1181 - Release Date: 12/11/2007 5:05 PM


--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list

Daniel B. Thurman wrote:
>Tony Nelson wrote:
>>Reboot, or log out and back in, or restart what you stopped.
>
>Yup. I did that. I even /.autorelabel just in case.
>setroubleshoot went right back into CPU overload.

This is still a problem. I have removed the packages:
setroubleshoot, setroubleshoot-server, setroubleshoot-plugins
and reinstalled the above and it still runs into CPU overload.

BTW: Last night, I disabled the setroubleshoot daemon and my
CPU load was "very quiet" which was nice. But still...
I'd like to see selinux reports...

Anyone care to advise?

No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.5.503 / Virus Database: 269.17.1/1181 - Release Date: 12/11/2007 5:05 PM


--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list

At 8:02 PM -0800 12/12/07, Daniel B. Thurman wrote:
>Tony Nelson wrote:
>>
>>Reboot, or log out and back in, or restart what you stopped.
>>
>
>Yup. I did that. I even /.autorelabel just in case.

That would have been my next question.

>setroubleshoot went right back into CPU overload.
>
>Why me!?!?!?

Hmm. I'd say take it to the Fedora SELinux list:

>List-Subscribe: <https://www.redhat.com/mailman/listinfo/fedora-selinux-list>,
> <mailto:fedora-selinux-list-request@redhat.com?subject=subscribe>
--
__________________________________________________ __________________
TonyN.:' <mailto:tonynelson@georgeanelson.com>
' <http://www.georgeanelson.com/>

--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list

This thread was originally posted at fedora-list, but other
posters recommended that I repost this thread here in this
list, although cleaned up.

For awhile, it seemed that I was getting regular sealert warnings
(the "star" in notification taskbar) but now I no longer receive it.

I noticed that setroubleshoot was running at 85-95% of CPU load so
I killed it along with sealert processes and that brought the CPU
load WAY down.

I have removed the setroubleshoot packages and re-installed it.
It did not remove the problem.

At this point, I have disabled the setroubleshootd service and my
CPU is now quiet.

What can I do to fix or analyze this problem?


No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.5.503 / Virus Database: 269.17.1/1183 - Release Date: 12/13/2007 9:15 AM


--
fedora-selinux-list mailing list
fedora-selinux-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

Daniel B. Thurman wrote:

This thread was originally posted at fedora-list, but other
posters recommended that I repost this thread here in this
list, although cleaned up.

For awhile, it seemed that I was getting regular sealert warnings
(the "star" in notification taskbar) but now I no longer receive it.

I noticed that setroubleshoot was running at 85-95% of CPU load so
I killed it along with sealert processes and that brought the CPU
load WAY down.

I have removed the setroubleshoot packages and re-installed it.
It did not remove the problem.

At this point, I have disabled the setroubleshootd service and my
CPU is now quiet.

What can I do to fix or analyze this problem?


File a bug report for starters. It would really help to get some
diagnostic information. To do this edit
/etc/setroubleshoot/setroubleshoot.cfg, find the section in the cfg file
label setroubleshootd_log, in that section change the value of level to
debug and then restart setroubleshootd with


/sbin/service setroubleshoot restart

After it misbehaves stop the service with

/sbin/service setroubleshoot stop

Then attach the logfile /var/log/setroubleshoot/setroubleshootd.log to
the bug report.


Thank you.

--
John Dennis <jdennis@redhat.com>

--
fedora-selinux-list mailing list
fedora-selinux-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

John Dennis wrote"
>File a bug report for starters. It would really help to get some
>diagnostic information. To do this edit
>/etc/setroubleshoot/setroubleshoot.cfg, find the section in
>the cfg file
>label setroubleshootd_log, in that section change the value of
>level to
>debug and then restart setroubleshootd with
>
>/sbin/service setroubleshoot restart
>
>After it misbehaves stop the service with
>
>/sbin/service setroubleshoot stop
>
>Then attach the logfile /var/log/setroubleshoot/setroubleshootd.log to
>the bug report.

Ok, I have set the level = debug, started setroublesootd and tail'ed
/var/log/setroubleshootd/*.log for about 15-30 minutes and I see
nothing at all. Not a single entry was logged.

I tried to bring up the sealert (or Applications->System-Tools->
SELinux Troubleshooter) and I was not able to get/see the gui
for this application to even come up. It refuses to display
the gui.

Any ideas?

No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.5.503 / Virus Database: 269.17.1/1183 - Release Date: 12/13/2007 9:15 AM


--
fedora-selinux-list mailing list
fedora-selinux-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

Daniel B. Thurman wrote:

Ok, I have set the level = debug, started setroublesootd and tail'ed
/var/log/setroubleshootd/*.log for about 15-30 minutes and I see
nothing at all. Not a single entry was logged.


Is it consuming 85-95% of your CPU or not?

The log file should not be empty.


I tried to bring up the sealert (or Applications->System-Tools->
SELinux Troubleshooter) and I was not able to get/see the gui
for this application to even come up. It refuses to display
the gui.

Any ideas?


Stop any running sealert with "sealert -q"

Then run it in the foreground with verbose output to the console by
doing this: "sealert -s -v"


What does it tell you?

--
John Dennis <jdennis@redhat.com>

--
fedora-selinux-list mailing list
fedora-selinux-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

P.S. There may be some confusion unless you understand setroubleshoot is
comprised of two processes


setroubleshootd is a daemon process run with an init script.

sealert is a user process run in your desktop session.

There should be one copy of each process running, verify this with "ps
ax | grep se"


There is no process named setroubleshoot.

When you report setroubleshoot is running at 85-95% of CPU I need to
know which of the two processes you're referring to.


Running tail on /var/log/setroubleshoot/setroubleshootd is not
sufficient. I need to see the entire contents of this file. But please
don't post it to the list, you can just send it to me directly.


--
John Dennis <jdennis@redhat.com>

--
fedora-selinux-list mailing list
fedora-selinux-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-selinux-list