Bug #443
closedauditset SMF not able to start in non-global zones
100%
Description
This is a carry over from OpenSolaris/ON.
Inside a non-global zone, the auditset SMF fails to start. The original bug is at:
http://bugs.opensolaris.org/bugdatabase/view_bug.do?bug_id=6975967
root@zone-z1:~# svcs xv/attributable audit flags
svc:/system/auditset:default (Set non
in the kernel context.)
State: maintenance since Mon Aug 09 10:47:49 2010
Reason: Start method failed repeatedly, last exited with status 1.
See: http://sun.com/msg/SMF-8000-KS
See: /var/svc/log/system-auditset:default.log
Impact: This service is not running.
root@zone-z1:~# tail -5 /var/svc/log/system-auditset:default.log
[ Aug 9 10:47:40 Disabled. ]
[ Aug 9 10:47:49 Enabled. ]
[ Aug 9 10:47:49 Executing start method ("/lib/svc/method/svc-auditset"). ]
Could not update kernel context (A_SETAMASK).
[ Aug 9 10:47:49 Method "start" exited with status 1. ]
Related issues
Updated by Albert Lee about 12 years ago
- Project changed from OpenIndiana Distribution to illumos gate
- Category deleted (
OS/Net (Kernel and Userland)) - Target version deleted (
oi_148)
Updated by Albert Lee about 12 years ago
This is a clone of #254 in case illumos goes with a different solution.
Updated by Richard PALO almost 10 years ago
- Difficulty set to Medium
- Tags set to needs-triage
Albert Lee wrote:
This is a clone of #254 in case illumos goes with a different solution.
Really been a while since I've done "onu"..., but now again giving it a whirl on oi_151a7 with a freshly built non-debug illumos-gate...
I have two NG zones that now exhibit this same behaviour. Extract from one of them using dmesg et al:
Mar 5 16:42:51 devzoneX fmd: [ID 377184 daemon.error] SUNW-MSG-ID: SMF-8000-YX, TYPE: defect, VER: 1, SEVERITY: major Mar 5 16:42:51 devzoneX EVENT-TIME: Tue Mar 5 16:42:51 CET 2013 Mar 5 16:42:51 devzoneX PLATFORM: i86pc, CSN: -, HOSTNAME: devzoneX Mar 5 16:42:51 devzoneX SOURCE: software-diagnosis, REV: 0.1 Mar 5 16:42:51 devzoneX EVENT-ID: 83b8d047-9086-6067-b790-f10a652ab97e Mar 5 16:42:51 devzoneX DESC: A service failed - a method is failing in a retryable manner but too often. Mar 5 16:42:51 devzoneX Refer to http://illumos.org/msg/SMF-8000-YX for more information. Mar 5 16:42:51 devzoneX AUTO-RESPONSE: The service has been placed into the maintenance state. Mar 5 16:42:51 devzoneX IMPACT: svc:/system/auditset:default is unavailable. Mar 5 16:42:51 devzoneX REC-ACTION: Run 'svcs -xv svc:/system/auditset:default' to determine the generic reason why the service failed, the location of any logfiles, and a list of other services impacted. richard@devzoneX:~$ svcs -xv svc:/system/auditset:default svc:/system/auditset:default (Set non-/attributable audit flags in the kernel context.) State: maintenance since 5 mars 2013 16:42:45 CET Reason: Start method failed repeatedly, last exited with status 1. See: http://illumos.org/msg/SMF-8000-KS See: /var/svc/log/system-auditset:default.log Impact: This service is not running. richard@devzoneX:~$ tail /var/svc/log/system-auditset:default.log [ mars 5 16:42:44 Enabled. ] [ mars 5 16:42:44 Executing start method ("/lib/svc/method/svc-auditset"). ] Could not update kernel context (A_SETAMASK). [ mars 5 16:42:45 Method "start" exited with status 1. ] [ mars 5 16:42:45 Executing start method ("/lib/svc/method/svc-auditset"). ] Could not update kernel context (A_SETAMASK). [ mars 5 16:42:45 Method "start" exited with status 1. ] [ mars 5 16:42:45 Executing start method ("/lib/svc/method/svc-auditset"). ] Could not update kernel context (A_SETAMASK). [ mars 5 16:42:45 Method "start" exited with status 1. ]
do I have to do something special with my zones after (or during) an onu with a newly built illumos-gate?
BTW/FWIW - auditd is and always been disabled in my NG zones.
Updated by Electric Monk almost 8 years ago
- Status changed from In Progress to Closed
- % Done changed from 80 to 100
git commit da5086c104e170d3832a3e1782dc8617061c7fc6
commit da5086c104e170d3832a3e1782dc8617061c7fc6 Author: Albert Lee <trisk@omniti.com> Date: 2015-02-26T02:23:11.000Z 443 auditset SMF not able to start in non-global zones Reviewed by: Adam Stevko <adam.stevko@gmail.com> Reviewed by: Andy Stormont <astormont@racktopsystems.com> Reviewed by: Igor Kozhukhov <ikozhukhov@gmail.com> Approved by: Robert Mustacchi <rm@joyent.com>