[OpenAFS] AFS crashed at access to "~/.IceAuthority"

[Russ Allbery]

Fr=C3=A9d=C3=A9ric Grelot <fredericg_99@yahoo.fr> writes:

> I'm using openafs 1.4.11 (default version on ubuntu karmic), with a
> "standard" kerberos configuration, together with libnss-afs and nscd to
> allow user home directories to be seamlessly translated.

> I just experienced several complete afs crashes, while I was trying to
> run evince (the pdf reader). It seems, according to dmesg, that it
> happens when evince tries to access the special file "~/.ICEauthority",
> which must be (I'm not sure) a socket file of some sort.

> The session then hangs completely, and I couldn't find any other way
> than logging as root and "# reboot" to get my system back.

> I managed to get the logs with dmesg : the first time, it mentionned
> .ICEauthority, which I deleted before trying again, but it crashed
> anyway.

> The first log (syslog) is :
> kernel: [ 9522.432659] type=3D1503 audit(1258492388.453:26): operation=3D=
"open" pid=3D5987 parent=3D1 profile=3D"/usr/bin/evince" requested_mask=3D"=
r::" denied_mask=3D"r::" fsuid=3D20001 ouid=3D20001 name=3D"/afs/cell.tld/u=
ser/u/us/user/.ICEauthority"

You either need openafs 1.4.11+dfsg-5 packages, which have a fix for this,
or disable AppArmor.

--=20
Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>