Re: Problems with snmpd following update.

[Daniel J Walsh <dwalsh redhat com>]

David Rye wrote:
> Have run in to a problem on a couple of servers that I have updated in
> the last week or so.
>
> snmpd does not start after a reboot, the following log extract is from
> /var/log/messages on server f4.
>
> Jan 31 17:26:54 f4 acpid: acpid startup succeeded
> Jan 31 17:26:54 f4 kernel: audit(1138728414.530:2): avc:  denied  {
> execmem } fo
> r  pid=5278 comm="snmpd" scontext=user_u:system_r:snmpd_t
> tcontext=user_u:system
> _r:snmpd_t tclass=process
> Jan 31 17:26:54 f4 snmpd: /usr/sbin/snmpd: error while loading shared
> libraries:
>  libbeecrypt.so.6: cannot enable executable stack as shared object
> requires: Per
> mission denied
> Jan 31 17:26:54 f4 snmpd: snmpd startup failed
>
>
>
>   
Does it work if you
execstack -c /usr/lib/libbeecrypt.so.6
> Running 
> execstack -q /usr/lib/libbeecrypt.so.6
> gives
> X /usr/lib/libbeecrypt.so.6
>
> So the library is explisitly marked as requiring an executable stack.
>
> looking at the obvious rpms yields the following
>
> kernel-2.6.12-1.1381_FC3 		was kernel-2.6.11-1.14_FC3
> net-snmp-5.2.1.2-FC3.1    		unchanged
> net-snmp-libs-5.2.1.2-FC3.1		unchanged
> selinux-policy-targeted-1.17.30-3.19	was
> selinux-policy-targeted-1.17.30-2.96
> libselinux-1.19.1-8			unchanged
> beecrypt-3.1.0-6			unchanged
>
>
> Any suggestions appreciated.
>
>