[OpenAFS] AFS crashed at access to "~/.IceAuthority"

[Björn Torkelsson]

On Tue, 2009-11-17 at 15:26 -0800, Russ Allbery wrote:
> Frédéric Grelot <fredericg_99@yahoo.fr> writes:
> 
> > I'm using openafs 1.4.11 (default version on ubuntu karmic), with a
> > "standard" kerberos configuration, together with libnss-afs and nscd =
to
> > allow user home directories to be seamlessly translated.
> 
> > I just experienced several complete afs crashes, while I was trying t=
o
> > run evince (the pdf reader). It seems, according to dmesg, that it
> > happens when evince tries to access the special file "~/.ICEauthority=
",
> > which must be (I'm not sure) a socket file of some sort.
> 
> > The session then hangs completely, and I couldn't find any other way
> > than logging as root and "# reboot" to get my system back.
> 
> > I managed to get the logs with dmesg : the first time, it mentionned
> > .ICEauthority, which I deleted before trying again, but it crashed
> > anyway.
> 
> > The first log (syslog) is :
> > kernel: [ 9522.432659] type=1503 audit(1258492388.453:26): operatio=
n="open" pid=5987 parent=1 profile="/usr/bin/evince" requested_mask="r::" denied_mask="r::" fsuid=20001 ouid=20001 name="/afs/cell.tld/user/u/us/user/.ICEauthority"
> 
> You either need openafs 1.4.11+dfsg-5 packages, which have a fix for th=
is,
> or disable AppArmor.

Or enable proposed, as it have a fixed version, 1.4.11+dfsg-1+ubuntu0.1.
See https://bugs.launchpad.net/ubuntu/+source/openafs/+bug/415766 for
more information.

/Björn
>