View Issue Details

IDProjectCategoryView StatusLast Update
0001321Rocky-Linux-8fapolicydpublic2022-12-08 20:35
ReporterAlbin Gustavsson Assigned ToLouis Abel  
PriorityhighSeveritycrashReproducibilityalways
Status needinfoResolutionopen 
OS8OS Version8.7 
Summary0001321: fapolicyd segfault
DescriptionAfter upgrading to `fapolicyd-1.1.3-8.el8.x86_64` we have seen fapolicyd randomly crashing with a segfault when new processes are launched. This sometimes cause executables that should be allowed to failed with EPERM/Operation not permitted errors.
Additional InformationAt the time of the errors we're seeing this in the logs:
systemd[1]: fapolicyd.service: Main process exited, code=killed, status=11/SEGV
systemd[1]: fapolicyd.service: Failed with result 'signal'.
systemd[1]: fapolicyd.service: Service RestartSec=100ms expired, scheduling restart.
systemd[1]: fapolicyd.service: Scheduled restart job, restart counter is at 10.
TagsNo tags attached.

Activities

Louis Abel

Louis Abel

2022-12-08 15:53

administrator   ~0001618

Please provide your fapolicy configuration and reproduction steps. Setting to needinfo.
Louis Abel

Louis Abel

2022-12-08 20:35

administrator   ~0001652

There is an upcoming update coming soon that we've prebuilt some time ago. I'm not sure if it'll resolve your issue: https://kojidev.rockylinux.org/koji/buildinfo?buildID=20897

Signed version of the packages are here: https://kojidev.rockylinux.org/kojifiles/packages/fapolicyd/1.1.3/8.el8_7.1/data/signed/6d745a60/

Issue History

Date Modified Username Field Change
2022-12-08 12:22 Albin Gustavsson New Issue
2022-12-08 15:53 Louis Abel Assigned To => Louis Abel
2022-12-08 15:53 Louis Abel Status new => needinfo
2022-12-08 15:53 Louis Abel Note Added: 0001618
2022-12-08 20:35 Louis Abel Note Added: 0001652