loading big policy fails with vmap kernel errors

Bug #903747 reported by Arkadiusz Miśkiewicz
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
AppArmor
Fix Released
Undecided
Unassigned

Bug Description

When loading big policy (40MB) then kernel 3.0.13 complains:

[wto gru 13 15:34:25 2011] alloc_vmap_area: 44 callbacks suppressed
[wto gru 13 15:34:25 2011] vmap allocation for size 46329856 failed: use vmalloc=<size> to increase size.
[wto gru 13 15:34:25 2011] vmap allocation for size 46301184 failed: use vmalloc=<size> to increase size.
[wto gru 13 15:34:25 2011] vmap allocation for size 46268416 failed: use vmalloc=<size> to increase size.
[wto gru 13 15:34:25 2011] vmap allocation for size 46239744 failed: use vmalloc=<size> to increase size.
[wto gru 13 15:34:25 2011] vmap allocation for size 46211072 failed: use vmalloc=<size> to increase size.
[wto gru 13 15:34:25 2011] vmap allocation for size 46182400 failed: use vmalloc=<size> to increase size.
[wto gru 13 15:34:25 2011] vmap allocation for size 46153728 failed: use vmalloc=<size> to increase size.
[wto gru 13 15:34:25 2011] vmap allocation for size 46125056 failed: use vmalloc=<size> to increase size.
[wto gru 13 15:34:25 2011] vmap allocation for size 46096384 failed: use vmalloc=<size> to increase size.
[wto gru 13 15:34:25 2011] vmap allocation for size 46067712 failed: use vmalloc=<size> to increase size.

The policy contains ~1500 HATs. Machine is 32bit and has 4GB of ram.

Revision history for this message
Arkadiusz Miśkiewicz (arekm) wrote :

One more explanation. Entire policy is nearly 10 000 hats but apparmor reload complains about this one only:

/etc/apparmor.d/usr.sbin.httpd.prefork-customer-97608 failed to load

and above thing was in dmesg.

Revision history for this message
Jamie Strandboge (jdstrand) wrote :

Is this still an issue with newer kernels?

Changed in apparmor:
status: New → Incomplete
Revision history for this message
Arkadiusz Miśkiewicz (arekm) wrote :

Didn't see this again (but not using 32bit machines anymore).

Revision history for this message
Jamie Strandboge (jdstrand) wrote :

Thanks, marking Fix Released for now. Please reopen if it comes up again.

Changed in apparmor:
status: Incomplete → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.