Project

General

Profile

Bug #443

auditset SMF not able to start in non-global zones

Added by Albert Lee over 9 years ago. Updated about 5 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Category:
-
Start date:
2010-09-24
Due date:
% Done:

100%

Estimated time:
Difficulty:
Medium
Tags:
needs-triage

Description

This is a carry over from OpenSolaris/ON.
Inside a non-global zone, the auditset SMF fails to start. The original bug is at:
http://bugs.opensolaris.org/bugdatabase/view_bug.do?bug_id=6975967

root@zone-z1:~# svcs xv
svc:/system/auditset:default (Set non/attributable audit flags
in the kernel context.)
State: maintenance since Mon Aug 09 10:47:49 2010
Reason: Start method failed repeatedly, last exited with status 1.
See: http://sun.com/msg/SMF-8000-KS
See: /var/svc/log/system-auditset:default.log
Impact: This service is not running.
root@zone-z1:~# tail -5 /var/svc/log/system-auditset:default.log
[ Aug 9 10:47:40 Disabled. ]
[ Aug 9 10:47:49 Enabled. ]
[ Aug 9 10:47:49 Executing start method ("/lib/svc/method/svc-auditset"). ]
Could not update kernel context (A_SETAMASK).
[ Aug 9 10:47:49 Method "start" exited with status 1. ]

Related issues

Related to OpenIndiana Distribution - Bug #254: auditset SMF not able to start in non-global zonesResolved2010-09-24

Actions

History

#1

Updated by Albert Lee over 9 years ago

  • Project changed from OpenIndiana Distribution to illumos gate
  • Category deleted (OS/Net (Kernel and Userland))
  • Target version deleted (oi_148)
#2

Updated by Albert Lee over 9 years ago

This is a clone of #254 in case illumos goes with a different solution.

#3

Updated by Richard PALO about 7 years ago

  • Difficulty set to Medium
  • Tags set to needs-triage

Albert Lee wrote:

This is a clone of #254 in case illumos goes with a different solution.

Really been a while since I've done "onu"..., but now again giving it a whirl on oi_151a7 with a freshly built non-debug illumos-gate...

I have two NG zones that now exhibit this same behaviour. Extract from one of them using dmesg et al:

Mar  5 16:42:51 devzoneX fmd: [ID 377184 daemon.error] SUNW-MSG-ID: SMF-8000-YX, TYPE: defect, VER: 1, SEVERITY: major
Mar  5 16:42:51 devzoneX EVENT-TIME: Tue Mar  5 16:42:51 CET 2013
Mar  5 16:42:51 devzoneX PLATFORM: i86pc, CSN: -, HOSTNAME: devzoneX
Mar  5 16:42:51 devzoneX SOURCE: software-diagnosis, REV: 0.1
Mar  5 16:42:51 devzoneX EVENT-ID: 83b8d047-9086-6067-b790-f10a652ab97e
Mar  5 16:42:51 devzoneX DESC: A service failed - a method is failing in a retryable manner but too often.
Mar  5 16:42:51 devzoneX   Refer to http://illumos.org/msg/SMF-8000-YX for more information.
Mar  5 16:42:51 devzoneX AUTO-RESPONSE: The service has been placed into the maintenance state.
Mar  5 16:42:51 devzoneX IMPACT: svc:/system/auditset:default is unavailable.
Mar  5 16:42:51 devzoneX REC-ACTION: Run 'svcs -xv svc:/system/auditset:default' to determine the generic reason why the service failed, the location of any logfiles, and a list of other services impacted.
richard@devzoneX:~$ svcs -xv svc:/system/auditset:default
svc:/system/auditset:default (Set non-/attributable audit flags
                                in the kernel context.)
 State: maintenance since  5 mars 2013 16:42:45 CET
Reason: Start method failed repeatedly, last exited with status 1.
   See: http://illumos.org/msg/SMF-8000-KS
   See: /var/svc/log/system-auditset:default.log
Impact: This service is not running.
richard@devzoneX:~$ tail /var/svc/log/system-auditset:default.log
[ mars  5 16:42:44 Enabled. ]
[ mars  5 16:42:44 Executing start method ("/lib/svc/method/svc-auditset"). ]
Could not update kernel context (A_SETAMASK).
[ mars  5 16:42:45 Method "start" exited with status 1. ]
[ mars  5 16:42:45 Executing start method ("/lib/svc/method/svc-auditset"). ]
Could not update kernel context (A_SETAMASK).
[ mars  5 16:42:45 Method "start" exited with status 1. ]
[ mars  5 16:42:45 Executing start method ("/lib/svc/method/svc-auditset"). ]
Could not update kernel context (A_SETAMASK).
[ mars  5 16:42:45 Method "start" exited with status 1. ]

do I have to do something special with my zones after (or during) an onu with a newly built illumos-gate?

BTW/FWIW - auditd is and always been disabled in my NG zones.

#4

Updated by Electric Monk about 5 years ago

  • Status changed from In Progress to Closed
  • % Done changed from 80 to 100

git commit da5086c104e170d3832a3e1782dc8617061c7fc6

commit  da5086c104e170d3832a3e1782dc8617061c7fc6
Author: Albert Lee <trisk@omniti.com>
Date:   2015-02-26T02:23:11.000Z

    443 auditset SMF not able to start in non-global zones
    Reviewed by: Adam Stevko <adam.stevko@gmail.com>
    Reviewed by: Andy Stormont <astormont@racktopsystems.com>
    Reviewed by: Igor Kozhukhov <ikozhukhov@gmail.com>
    Approved by: Robert Mustacchi <rm@joyent.com>

Also available in: Atom PDF