store | blogs | forums | twitter | facebook | wiki | downloads | support portal
Atomic Secure Linux
It is currently Fri Nov 28, 2014 4:22 am

» Feed - Atomicorp

All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 34 posts ]  Go to page Previous  1, 2, 3  Next
Author Message
 Post subject: Re: 1and1 ASL Kernel Problem
Unread postPosted: Mon Aug 22, 2011 5:31 pm 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
User avatar

Joined: Thu Feb 07, 2008 7:49 pm
Posts: 3673
Location: Chantilly, VA
Quote:
grsec: denied modification of grsecurity sysctl value : harden_ptrace by /sbin/sysctl[sysctl:4270] uid/euid:0/0 gid/egid:0/0, parent /etc/rc.d/init.d/network[network:4041] uid/euid:0/0 gid/egid:0/0


No, thats benign. That just means the kernel is locked, which is expected and harmless.

_________________
Michael Shinn
Atomicorp - Security For Everyone

Co-Author of Troubleshooting Linux Firewalls.


Top
 Profile  
 
 Post subject: Re: 1and1 ASL Kernel Problem
Unread postPosted: Mon Aug 22, 2011 6:07 pm 
Offline
Forum User
Forum User

Joined: Tue Apr 27, 2010 2:21 am
Posts: 30
I've also set up marking and sysstat on my server... same symptoms as described... random lock ups and only thing to do is restart through 1&1 control panel. Hoping to get to the bottom of it...


Top
 Profile  
 
 Post subject: Re: 1and1 ASL Kernel Problem
Unread postPosted: Mon Aug 22, 2011 7:12 pm 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
User avatar

Joined: Thu Feb 07, 2008 7:49 pm
Posts: 3673
Location: Chantilly, VA
So when you say lock up, do you mean the serial console is also not working?

_________________
Michael Shinn
Atomicorp - Security For Everyone

Co-Author of Troubleshooting Linux Firewalls.


Top
 Profile  
 
 Post subject: Re: 1and1 ASL Kernel Problem
Unread postPosted: Mon Aug 22, 2011 7:44 pm 
Offline
Forum Regular
Forum Regular

Joined: Tue May 10, 2005 1:24 pm
Posts: 193
No serial console for me.
srthomas, is yours a new 1and1 server?


Top
 Profile  
 
 Post subject: Re: 1and1 ASL Kernel Problem
Unread postPosted: Tue Aug 23, 2011 2:55 am 
Offline
Forum User
Forum User

Joined: Tue Apr 27, 2010 2:21 am
Posts: 30
I've had it such that the serial console won't respond either.

My dedicated server is approx 8 months old...


Top
 Profile  
 
 Post subject: Re: 1and1 ASL Kernel Problem
Unread postPosted: Tue Aug 23, 2011 10:59 am 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
User avatar

Joined: Thu Feb 07, 2008 7:49 pm
Posts: 3673
Location: Chantilly, VA
Well most of our servers are 1and1 servers, so this is a new one to us. I'm wondering if this is the Centos raid sync event, is there a particular time or set of times when this occurs?

_________________
Michael Shinn
Atomicorp - Security For Everyone

Co-Author of Troubleshooting Linux Firewalls.


Top
 Profile  
 
 Post subject: Re: 1and1 ASL Kernel Problem
Unread postPosted: Tue Aug 23, 2011 11:23 am 
Offline
Forum Regular
Forum Regular

Joined: Sat Mar 28, 2009 6:58 pm
Posts: 865
Location: Germany
I had problems with the serial console at 1and1 becuase it was broken. And that two times in short period.
After opening a support ticket they fixed it. So it might not be related to the issue you have in general.


Top
 Profile  
 
 Post subject: Re: 1and1 ASL Kernel Problem
Unread postPosted: Tue Aug 23, 2011 11:28 am 
Offline
Forum User
Forum User

Joined: Tue Apr 27, 2010 2:21 am
Posts: 30
I haven't noticed a pattern... a while ago I had some instances within an hour or so of each other, but it's always appeared random. Realise that doesn't help much.


Top
 Profile  
 
 Post subject: Re: 1and1 ASL Kernel Problem
Unread postPosted: Tue Aug 23, 2011 11:30 am 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
User avatar

Joined: Thu Feb 07, 2008 7:49 pm
Posts: 3673
Location: Chantilly, VA
Thank you, I realize this might not help either, but is there a chance this is an actual hardware problem? (We have a lot of 1and1 servers our self, and aren't seeing this)

_________________
Michael Shinn
Atomicorp - Security For Everyone

Co-Author of Troubleshooting Linux Firewalls.


Top
 Profile  
 
 Post subject: Re: 1and1 ASL Kernel Problem
Unread postPosted: Tue Aug 23, 2011 3:14 pm 
Offline
Forum Regular
Forum Regular

Joined: Tue May 10, 2005 1:24 pm
Posts: 193
I don't think mine is a hardware problem. I have run the standard kernel I mentioned in my first post for over a month and a half without this problem. Whenever I run the asl kernel, this happens within a week. I will have to let you know about the time period. Like I said before, the time of day is random and the day of week is random, but I'm not sure about the part of the hour that this happens.


Top
 Profile  
 
 Post subject: Re: 1and1 ASL Kernel Problem
Unread postPosted: Tue Aug 23, 2011 3:20 pm 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
User avatar

Joined: Thu Feb 07, 2008 7:49 pm
Posts: 3673
Location: Chantilly, VA
Hmmm, if its sort of weekly, that sounds like it might be the Centos raid sync bug. They did something in a later version of 5.x that caused all sorts of problems with software raids and newer kernels (its not a kernel bug btw, its the actual sync event from userland it just kills the boxes I/O channel which makes it totally unresponsive).

Do you have a RAID or software RAID on this system?

_________________
Michael Shinn
Atomicorp - Security For Everyone

Co-Author of Troubleshooting Linux Firewalls.


Top
 Profile  
 
 Post subject: Re: 1and1 ASL Kernel Problem
Unread postPosted: Tue Aug 23, 2011 4:08 pm 
Offline
Forum Regular
Forum Regular

Joined: Tue May 10, 2005 1:24 pm
Posts: 193
Yes, software RAID. I used AOOI to install. I can mention that once I run the asl kernel, the amount of days it runs is also random. I have had it run for 1.5 to 2 days and up to 6.5 days.


Top
 Profile  
 
 Post subject: Re: 1and1 ASL Kernel Problem
Unread postPosted: Tue Aug 23, 2011 4:10 pm 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
User avatar

Joined: Thu Feb 07, 2008 7:49 pm
Posts: 3673
Location: Chantilly, VA
I think this might be the Centos raid-sync event then. I'll see if I can find the post on their forums about this, it basically effects all modern kernels and its something that got added in 5.6 or 5.5 I want to say and it has this inconsistent and weird effect you describe. As I recall, I believe folks just disabled it.

_________________
Michael Shinn
Atomicorp - Security For Everyone

Co-Author of Troubleshooting Linux Firewalls.


Top
 Profile  
 
 Post subject: Re: 1and1 ASL Kernel Problem
Unread postPosted: Tue Aug 23, 2011 4:27 pm 
Offline
Forum Regular
Forum Regular

Joined: Sat Mar 28, 2009 6:58 pm
Posts: 865
Location: Germany
Mike, you might talked about this topic:
http://www.atomicorp.com/forum/viewtopic.php?f=1&t=4847&p=29568&hilit=check+raid#p29568


Top
 Profile  
 
 Post subject: Re: 1and1 ASL Kernel Problem
Unread postPosted: Thu Aug 25, 2011 5:09 pm 
Offline
Forum Regular
Forum Regular

Joined: Tue May 10, 2005 1:24 pm
Posts: 193
Yeah, I was involved with that post and I did disable that check for a while, but still had these problems with the newer kernel. Am I right to assume if I move to CentOS6, you think this issue will go away?


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 34 posts ]  Go to page Previous  1, 2, 3  Next

» Feed - Atomicorp

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: Bing [Bot] and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group