LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Red Hat
User Name
Password
Red Hat This forum is for the discussion of Red Hat Linux.

Notices

Reply
 
LinkBack Search this Thread
Old 02-05-2013, 09:37 PM   #1
timl
Member
 
Registered: Jan 2009
Location: Sydney, Australia
Distribution: Fedora,CentOS
Posts: 241

Rep: Reputation: 37
kernel problem


Hi, I run a Centos PC which I use as a server. The PC is running headless and I mostly store office files and mp3s. FYI
2.6.32-279.19.1.el6.i686
I check /var/log/messages every morning and activity is minimal. This morning I could not open any docs. When I checked messages things started going crazy at 11:10:12 on Feb 6 (file attached). I panicked and rebooted which was probably a mistake but after the reboot the same messages appeared.

A quick flick around the net suggested there was a kernel problem affecting selinux and, as suggested, "semodule -B" would help. I tried this and the messages disappeared.

So, for now, I have a functional server. But I am way out of my depth when diagnosing this problem. I would be grateful if someone could have a look at the attached messages file and make suggestions.

Thanks
Attached Files
File Type: log messages.log (104.5 KB, 13 views)
 
Old 02-06-2013, 03:03 PM   #2
TB0ne
Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 13,772

Rep: Reputation: 2346Reputation: 2346Reputation: 2346Reputation: 2346Reputation: 2346Reputation: 2346Reputation: 2346Reputation: 2346Reputation: 2346Reputation: 2346Reputation: 2346
Quote:
Originally Posted by timl View Post
Hi, I run a Centos PC which I use as a server. The PC is running headless and I mostly store office files and mp3s. FYI
2.6.32-279.19.1.el6.i686
I check /var/log/messages every morning and activity is minimal. This morning I could not open any docs. When I checked messages things started going crazy at 11:10:12 on Feb 6 (file attached). I panicked and rebooted which was probably a mistake but after the reboot the same messages appeared.

A quick flick around the net suggested there was a kernel problem affecting selinux and, as suggested, "semodule -B" would help. I tried this and the messages disappeared.

So, for now, I have a functional server. But I am way out of my depth when diagnosing this problem. I would be grateful if someone could have a look at the attached messages file and make suggestions.
Thats a fairly generic message...but what triggered the condition is what you need to find out. You can use ausearch to look for things in the audit daemon logs. For example, to see today's AVC denials:
Code:
ausearch -m avc -ts today
The man page has more options, too...worth a read. You can also disable setroubleshoot altogether, although I wouldn't without knowing what's up.
Code:
chkconfig setroublehoot off
service setroubleshoot stop
My first inclination would be to ask "what changed"?? Where is your server set up? Is it exposed to the internet at all? Did you look for any hardware faults? If this has been chugging along fine for a good while, then suddenly did something....well...something had to cause it.
 
1 members found this post helpful.
Old 02-07-2013, 04:45 PM   #3
timl
Member
 
Registered: Jan 2009
Location: Sydney, Australia
Distribution: Fedora,CentOS
Posts: 241

Original Poster
Rep: Reputation: 37
thanks TB0ne. I am digging. Noted your point about "what changed". Nothing immediate springs to mind but I am racking my brains. Yup, connected to internet. No known h/w problems. I'll report back with any progress.
 
Old 02-08-2013, 09:05 AM   #4
TB0ne
Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 13,772

Rep: Reputation: 2346Reputation: 2346Reputation: 2346Reputation: 2346Reputation: 2346Reputation: 2346Reputation: 2346Reputation: 2346Reputation: 2346Reputation: 2346Reputation: 2346
Quote:
Originally Posted by timl View Post
thanks TB0ne. I am digging. Noted your point about "what changed". Nothing immediate springs to mind but I am racking my brains. Yup, connected to internet. No known h/w problems. I'll report back with any progress.
Well, that's why I asked about internet connectivity. If someone tried to get in (and I am NOT saying they did..just mentioning the possibility), something may have been changed for you. That's unlikely, though...but I'd look into the system logs for hardware related messages, and perhaps run smartctl to see if your disks are healthy.
 
Old 02-12-2013, 05:09 PM   #5
timl
Member
 
Registered: Jan 2009
Location: Sydney, Australia
Distribution: Fedora,CentOS
Posts: 241

Original Poster
Rep: Reputation: 37
I am going to close this one even though I haven't really got a solution. Thanks to TB0ne for some some useful tips - the disks are fine but I need to keep looking and learning.

I found I had set the server in question to run selinux in permissive mode which I have now changed.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are Off
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] Problem Kernel Panic error 3.3.6 ZEN kernel Debian 6 Squeeze? Vita Linux - Kernel 10 05-25-2012 07:27 PM
[SOLVED] lilo says my 2.6 kernel image is to large&new problem kernel will not boot smeezekitty Linux - Newbie 3 10-13-2009 08:41 PM
compiling kernel problem --- Kernel panic: unable to mount root fs ........ anthonymts123 Linux - General 5 07-31-2006 02:29 AM
Linux Kernel Problem -- Kernel panic: CPU context corrupt crcooney Linux - Distributions 0 01-15-2004 08:48 AM


All times are GMT -5. The time now is 05:36 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration