Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-102995

keylime leaks connections to the DB

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • keylime-7.12.1-8.el10
    • Yes
    • Critical
    • 1
    • rhel-security-special-projects
    • 1
    • False
    • False
    • Hide

      None

      Show
      None
    • No
    • SECENGSP Cycle 24
    • Release Note Not Required
    • Unspecified
    • Unspecified
    • Unspecified
    • All
    • None

      What were you trying to do that didn't work?

      When using SQLite (this may affect other DB as well), the number of connections to the database grows indefinitely, reaching the maximum number of connections. This is described upstream in https://github.com/keylime/keylime/issues/1689

      Apparently the connections to the database are not closed properly, leading to a connection leak.

      This happened multiple times in CI execution and an example can be seen here:
      https://artifacts.dev.testing-farm.io/ee793b2d-71c1-455a-a206-c207b264f5d3/work-upstream-keylime-containersf4l5qc3u/plans/upstream-keylime-containers/execute/data/guest/default-0/container/functional/keylime_agent_container-basic-attestation-7/output.txt 

      What is the impact of this issue to you?

      When the number of open connections to the database reach the configured limit, it does not accept new connections, blocking the access to the database

      Please provide the package NVR for which the bug is seen:

      keylime-7.12.1-6.el10

      How reproducible is this bug?:

      Happens often in CI

      Steps to reproduce

      1. Run the CI tests. It happens usually during the execution of the 

      Expected results

      The connections to the DB are properly closed and there is no accumulation of open connections

      Actual results

      The connections to the DB accumulates until the maximum number of connections is reached

              ansasaki@redhat.com Anderson Sasaki
              ansasaki@redhat.com Anderson Sasaki
              Sergio Correia Sergio Correia
              Karel Srot Karel Srot
              Votes:
              0 Vote for this issue
              Watchers:
              8 Start watching this issue

                Created:
                Updated: