[Open-scap] OpenSCAP Error, Missing Library?

[Przemek Klosowski]

On 04/19/2013 05:11 AM, Anthony Davis wrote:

> The rule it hangs on:
> Rule ID:        SV-37379r1_rule
> Title:          All interactive user home directories defined in the /etc/passwd file must exist.
> Result:
>
> strace output:
>
> write(1, "Rule ID:\r\t\t\33[1mSV-37379r1_rule\33["..., 37) = 37
> write(1, "Title:\r\t\tAll interactive user ho"..., 91) = 91
> write(1, "Result:\r\t\t", 10)           = 10

>  wait4(13305, 0x7fff2584379c, WNOHANG, NULL) = 0
> writev(5, [{"(#d8:seap.msg#d3::id#d8((#d15:pa"..., 242}], 1) = 242
>  wait4(13305, 0x7fff2584369c, WNOHANG, NULL) = 0
>   select(6, [5], NULL, NULL, NULL)        = 1 (in [5])
>  wait4(13305, 0x7fff2584372c, WNOHANG, NULL) = 0
> read(5, "(#d8:seap.cmd#d3::id#d2#d6::clas"..., 16384) = 104

It's not clear where it's spending all the time. Are there visible waits 
between those output lines, or is it a constant stream of millions and 
that's what's taking all the time?

I don't think it's hanging in wait4() because they use WNOHANG so they 
should return immediately (0 return value means 'no change'). Therefore, 
the time is probably spent in select() calls...

Perhaps rerun it with  strace -r -f -p `pidof oscap` to see what those 
subprocesses are doing, and where the time is spent.