[Open-scap] OpenSCAP Error, Missing Library?

[Anthony Davis]

Hi Przemek,

Thanks for the reply. if nothing else I have learned a bit about strace :)

So I have followed what you have said and now have the below...

Process hangs:

[pid  3240]      0.000356 wait4(3261, 0x7fff4c86fa3c, WNOHANG, NULL) = 0
[pid  3240]      0.000265 select(7, [6], NULL, NULL, NULL

LS:

[root at server ~]# ls -l /proc/3240/fd/6
lrwx------ 1 root root 64 Apr 23 17:22 /proc/3240/fd/6 -> socket:[26058]

So i guess that shows the inode number? But what can I do with that info to furthure debug the problem?

Kind Regards

Tony


________________________________________
From: Przemek Klosowski [przemek.klosowski at nist.gov]
Sent: 22 April 2013 16:40
To: Anthony Davis
Subject: Re: [Open-scap] OpenSCAP Error, Missing Library?

On 04/22/2013 07:50 AM, Anthony Davis wrote:
> Hi,
>
> Sorry for the delay. So the output below is using  strace -r -f -p `pidof oscap tog rab the strace info, I have copied and pasted, from where the process starts and where it hangs, but that is all the information it gives me:
>
> So process 3218 is checking the rule before and this seems to work fine, it just hits the next rule and hangs...

I don't see that from the data---it looks as if there's a constant
progress, with system calls being issued every few miliseconds. Where
exactly do you see the hang? is it after the following:

[pid  3088]      0.000066 wait4(3109, 0x7fff68c44ffc, WNOHANG, NULL) = 0
[pid  3088]      0.000046 select(7, [6], NULL, NULL, NULL

THat would make certain sense---it blocks on read() from file descriptor
6 which it didn't read before.. can you check what is fd 6, e.g. by
doing 'ls -l /proc/3088/fd/6' (substitute 3088 with whatever PID is
doing the select call that blocks, and check that 6 corresponds to the
fd in []).

Is that strace sleuthing understandable to you, or all sound like black
arts? I am confident that you can get to the bottom of this by checking
things out this way, but I assume some familiarity with the low level
Linux details, which you may not share---I am glad to help anyway but I
don't want to lead you into frustration, so if you're not comfortable
doing all this just let me know.

Greetings

p




-----------------------------
http://www.bbc.co.uk
This e-mail (and any attachments) is confidential and
may contain personal views which are not the views of the BBC unless specifically stated.
If you have received it in
error, please delete it from your system.
Do not use, copy or disclose the
information in any way nor act in reliance on it and notify the sender
immediately.
Please note that the BBC monitors e-mails
sent or received.
Further communication will signify your consent to
this.
-----------------------------