On Fri, Sep 16, 2016 at 12:53 PM, Zbigniew Jędrzejewski-Szmek <zbyszek@xxxxxxxxx> wrote: > On Fri, Sep 16, 2016 at 12:03:06PM -0600, Chris Murphy wrote: >> On Fri, Sep 16, 2016 at 11:26 AM, Zbigniew Jędrzejewski-Szmek >> <zbyszek@xxxxxxxxx> wrote: >> > On Fri, Sep 16, 2016 at 11:02:44AM -0600, Chris Murphy wrote: >> >> >> None have * >> > >> > So this is the issue really. I guess we should make the output >> > more clear in that case. Please try something as simple as >> > bash -c 'kill -ABRT $$' → this should result in a coredump appearing >> > in /var/lib/systemd/coredump. If it doesn't than maybe you don't >> > have enough free space and systemd-coredump, or something else is wrong. >> >> $ coredumpctl >> Fri 2016-09-16 11:59:37 MDT 3343 1000 1000 6 * /usr/bin/bash >> >> $ ls -l /var/lib/systemd/coredump >> total 0 >> -rw-r-----+ 1 root root 0 Sep 16 11:59 >> core.bash.1000.7f1dd932c6594cbdae77969bd76125ca.3343.14740487770000000000 >> >> journalctl -f >> >> Sep 16 11:59:37 f24m audit[3343]: ANOM_ABEND auid=1000 uid=1000 >> gid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 >> pid=3343 comm="bash" exe="/usr/bin/bash" sig=6 >> Sep 16 11:59:37 f24m systemd[1]: Started Process Core Dump (PID 3344/UID 0). >> Sep 16 11:59:37 f24m audit[1]: SERVICE_START pid=1 uid=0 >> auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 >> msg='unit=systemd-coredump@1-3344-0 comm="systemd" >> exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? >> res=success' >> Sep 16 11:59:37 f24m systemd-coredump[3345]: Failed to compress >> /var/lib/systemd/coredump/.#core.bash.1000.7f1dd932c6594cbdae77969bd76125ca.3343.1474048777000000000000.lz4fb3b07bda3e93e45: >> Invalid argument > It seems that our compression routine is borked and falls over with EINVAL > when it is asked to compress an empty file. I'll fix that. > But if the file it is trying to compress is empty, the problem already happened > before (the core should not have 0 size). > > What is the kernel.core_pattern value that you are using? $ cat /proc/sys/kernel/core_pattern |/usr/lib/systemd/systemd-coredump %P %u %g %s %t %c %e > Do you have the same result with the default of '|/usr/lib/systemd/systemd-coredump %P %u %g %s %t %c %e'? I don't know how to determine this. > Is selinux enabled, and if yes, do you get a different result with enforcing off? SELinux is set to enforcing, if I reboot with enforcing=0 the same results occur. Looks like the same messages in the journal also. Sep 16 13:11:37 f24m audit[2196]: ANOM_ABEND auid=1000 uid=1000 gid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=2196 comm="bash" exe="/usr/bin/bash" sig=6 Sep 16 13:11:37 f24m systemd[1]: Started Process Core Dump (PID 2197/UID 0). Sep 16 13:11:37 f24m audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-coredump@1-2197-0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 16 13:11:37 f24m systemd-coredump[2198]: Failed to compress /var/lib/systemd/coredump/.#core.bash.1000.7c3e44a5f9ba4d02880f463d6871bb99.2196.1474053097000000000000.lz4d84d95620f767fc7: Invalid argument Sep 16 13:11:37 f24m systemd-coredump[2198]: Failed to generate stack trace: invalid `Elf' handle Sep 16 13:11:37 f24m systemd-coredump[2198]: Process 2196 (bash) of user 1000 dumped core. Sep 16 13:11:37 f24m audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-coredump@1-2197-0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 16 13:11:37 f24m abrt-dump-journal-core[903]: Failed to obtain all required information from journald Sep 16 13:11:37 f24m abrt-dump-journal-core[903]: Failed to obtain all required information from journald Sep 16 13:11:37 f24m abrt-server[2208]: Blacklisted package 'bash' Sep 16 13:11:37 f24m abrt-server[2208]: 'post-create' on '/var/spool/abrt/ccpp-2016-09-16-13:11:37.747564-903' exited with 1 Sep 16 13:11:37 f24m abrt-server[2208]: Deleting problem directory '/var/spool/abrt/ccpp-2016-09-16-13:11:37.747564-903' ausearch -m AVC only turns up one item from yesterday. -- Chris Murphy _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
