-
Bug
-
Resolution: Unresolved
-
Critical
-
None
-
rhel-9.4
-
None
-
None
-
Critical
-
rhel-sst-security-special-projects
-
ssg_security
-
None
-
False
-
-
None
-
Red Hat Enterprise Linux
-
None
-
-
None
-
None
-
-
x86_64
-
None
What were you trying to do that didn't work?
Because of some RPMDB issue, a SIGBUS was raised, causing fapolicyd to deadlock the system:
fapolicyd dying made the kernel spawn the systemd-coredump executable to collect the coredump. Executing the program leads to querying fapolicyd to allow the execution, which cannot happen since fapolicyd is dying.
See PR https://github.com/linux-application-whitelisting/fapolicyd/pull/273 for fix proposal.
Please provide the package NVR for which bug is seen:
fapolicyd-1.3.2-100
How reproducible:
Always
Steps to reproduce
- Install 2 RPMs one after the other "rapidly"
# rpm -i ./tcsh-6.22.03-6.el9.x86_64.rpm ; rpm -i ./zsh-5.8-9.el9.x86_64.rpm warning: ./tcsh-6.22.03-6.el9.x86_64.rpm: Header V3 RSA/SHA256 Signature, key ID fd431d51: NOKEY warning: ./zsh-5.8-9.el9.x86_64.rpm: Header V3 RSA/SHA256 Signature, key ID fd431d51: NOKEY --> HANG
Note: this doesn't occur anymore with latest rpm-4.16.1.3-29.el9.x86_64 but reproduces with downgrading to rpm-4.16.1.3-27.el9_3.x86_64
Expected results
System hangs (i.e. no way to do anything, current processes hanging, no way to log in, etc.)
Actual results
System still functional
- clones
-
RHEL-15498 fapolicyd deadlocks the system because it got a fatal SIGBUS signal
- Planning
- is related to
-
SAT-29311 When installing Satellite 6.16@rhel9.z with fapolicyd, the load average will bump and the machine will freeze
- Backlog
- links to