[Open-scap] OpenSCAP Error, Missing Library?
Anthony.Davis at bbc.co.uk
Tue Apr 23 16:29:44 UTC 2013
Thanks for the reply. if nothing else I have learned a bit about strace :)
So I have followed what you have said and now have the below...
[pid 3240] 0.000356 wait4(3261, 0x7fff4c86fa3c, WNOHANG, NULL) = 0
[pid 3240] 0.000265 select(7, , NULL, NULL, NULL
[root at server ~]# ls -l /proc/3240/fd/6
lrwx------ 1 root root 64 Apr 23 17:22 /proc/3240/fd/6 -> socket:
So i guess that shows the inode number? But what can I do with that info to furthure debug the problem?
From: Przemek Klosowski [przemek.klosowski at nist.gov]
Sent: 22 April 2013 16:40
To: Anthony Davis
Subject: Re: [Open-scap] OpenSCAP Error, Missing Library?
On 04/22/2013 07:50 AM, Anthony Davis wrote:
> Sorry for the delay. So the output below is using strace -r -f -p `pidof oscap tog rab the strace info, I have copied and pasted, from where the process starts and where it hangs, but that is all the information it gives me:
> So process 3218 is checking the rule before and this seems to work fine, it just hits the next rule and hangs...
I don't see that from the data---it looks as if there's a constant
progress, with system calls being issued every few miliseconds. Where
exactly do you see the hang? is it after the following:
[pid 3088] 0.000066 wait4(3109, 0x7fff68c44ffc, WNOHANG, NULL) = 0
[pid 3088] 0.000046 select(7, , NULL, NULL, NULL
THat would make certain sense---it blocks on read() from file descriptor
6 which it didn't read before.. can you check what is fd 6, e.g. by
doing 'ls -l /proc/3088/fd/6' (substitute 3088 with whatever PID is
doing the select call that blocks, and check that 6 corresponds to the
fd in ).
Is that strace sleuthing understandable to you, or all sound like black
arts? I am confident that you can get to the bottom of this by checking
things out this way, but I assume some familiarity with the low level
Linux details, which you may not share---I am glad to help anyway but I
don't want to lead you into frustration, so if you're not comfortable
doing all this just let me know.
This e-mail (and any attachments) is confidential and
may contain personal views which are not the views of the BBC unless specifically stated.
If you have received it in
error, please delete it from your system.
Do not use, copy or disclose the
information in any way nor act in reliance on it and notify the sender
Please note that the BBC monitors e-mails
sent or received.
Further communication will signify your consent to
More information about the Open-scap-list