【IMA-bugs】kernel panic in IMA appraisal enforce mode, except log mode

openRuler20.09, kernel panic in enforce-evm mdoe and crash vmore-dmesg.txt:
[  797.648902] VFS: Open an exclusive opened block device for write dm-1 [3419 swapoff].
[  797.720670] systemd-shutdown[1]: Syncing filesystems and block devices.
[  797.921590] systemd-shutdown[1]: Sending SIGTERM to remaining processes...
[  797.945819] systemd-shutdown[1]: Sending SIGKILL to remaining processes...
[  797.947811] systemd-shutdown[1]: Unmounting file systems.
[  797.948457] [3426]: Remounting '/' read-only in with options 'seclabel'.
[  797.952345] EXT4-fs (dm-0): re-mounted. Opts: 
[  797.957304] systemd-shutdown[1]: All filesystems unmounted.
[  797.957307] systemd-shutdown[1]: Deactivating swaps.
[  797.957358] systemd-shutdown[1]: All swaps deactivated.
[  797.957360] systemd-shutdown[1]: Detaching loop devices.
[  797.957511] systemd-shutdown[1]: All loop devices detached.
[  797.957513] systemd-shutdown[1]: Detaching DM devices.
[  797.957905] systemd-shutdown[1]: Detaching DM /dev/dm-1 (253:1).
[  797.966977] systemd-shutdown[1]: Not all DM devices detached, 1 left.
[  797.967096] systemd-shutdown[1]: Detaching DM devices.
[  797.967291] systemd-shutdown[1]: Not all DM devices detached, 1 left.
[  797.967293] systemd-shutdown[1]: Cannot finalize remaining DM devices, continuing.
[  797.993322] systemd-shutdown[1]: Successfully changed into root pivot.
[  797.993325] systemd-shutdown[1]: Returning to initrd...
[  797.999910] Kernel panic - not syncing: Attempted to kill init! exitcode=0x00007f00

[  797.999939] CPU: 0 PID: 1 Comm: shutdown Kdump: loaded Not tainted 4.19.140-2009.4.0.0048.oe1.x86_64 #1
[  797.999961] Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 07/22/2020
[  797.999986] Call Trace:
[  797.999998]  dump_stack+0x66/0x90
[  798.000009]  panic+0xe7/0x292
[  798.000050]  do_exit.cold+0x7e/0x81
[  798.000077]  ? __do_page_fault+0x277/0x4f0
[  798.000088]  do_group_exit+0x3a/0xa0
[  798.000098]  __x64_sys_exit_group+0x14/0x20
[  798.000110]  do_syscall_64+0x5f/0x1e0
[  798.000120]  ? page_fault+0x8/0x30
[  798.000130]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  798.000143] RIP: 0033:0x7f92b9ad1d9e
[  798.000152] Code: 89 fa 41 b8 e7 00 00 00 be 3c 00 00 00 eb 14 0f 1f 44 00 00 89 d7 89 f0 0f 05 48 3d 00 f0 ff ff 77 1a f4 89 d7 44 89 c0 0f 05 <48> 3d 00 f0 ff ff 76 e2 f7 d8 89 05 32 f3 00 00 eb d8 f7 d8 89 05
[  798.000197] RSP: 002b:00007fff8ca86468 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7
[  798.000215] RAX: ffffffffffffffda RBX: 00007f92b9ae1d00 RCX: 00007f92b9ad1d9e
[  798.000232] RDX: 000000000000007f RSI: 000000000000003c RDI: 000000000000007f
[  798.000248] RBP: 00007fff8ca86e00 R08: 00000000000000e7 R09: 00000000ffffffff
[  798.000265] R10: 00007f92b9ad8c4e R11: 0000000000000202 R12: 00007f92b9ada7f0
[  798.000281] R13: 0000000000000000 R14: 00007f92b9ae1d30 R15: 00007f92b9ae1d40
[  798.001339] Kernel Offset: 0x3b200000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)

openEuler/security-facility
关闭

内容风险标识

评论 (4)

openEuler/security-facility关闭 .gitee-modal { width: 500px !important; }

内容风险标识