Closed Bug 849882 Opened 11 years ago Closed 11 years ago

Disabled RSBAC on db1.iddb.scl2.svc.mozilla.com

Categories

(Security Assurance :: General, task)

x86
macOS
task
Not set
normal

Tracking

(Not tracked)

RESOLVED WONTFIX

People

(Reporter: jlaz, Assigned: kang)

Details

Over the weekend, db1.iddb.scl2.svc.mozilla.com ASR'd and rebooted on its own due to a possible hardware problem that has yet to be determined.  Upon a successful reboot, networking was unavailable.   I was able to open a console to the box, but since RSBAC is enabled on this host, root logins were disabled.

I rebooted the host and added a kernel argument to boot the OS with RSBAC in softmode, and network connectivity was restored after boot.  

Let us know what we can do so that we can re-enable RSBAC on this host and ensure that network connectivity is available upon reboot.
Assignee: nobody → gdestuynder
Component: Security Assurance: Applications → Security Assurance: Operations
does this still happen?
Flags: needinfo?(jlaz)
Has not happened since the last occurrence.  Looping in gene so that we can get RSBAC enabled just in case we need downtime
Flags: needinfo?(jlaz)
Flags: needinfo?(gene)
Jlaz, do you suspect that if we disable softmode that we will again lose network connectivity? Do you suspect that if we disable softmode and the machine ends up rebooting that we'll see a recurrence of the loss of network connectivity on boot?
Flags: needinfo?(gene) → needinfo?(jlaz)
I don't think we'd lose connectivity (or at least, that's what the expected behavior should be)

Closing out as we've already decomm'd SCL2
Status: NEW → RESOLVED
Closed: 11 years ago
Flags: needinfo?(jlaz)
Resolution: --- → WONTFIX
Component: Operations Security (OpSec): General → General
Product: mozilla.org → Enterprise Information Security
You need to log in before you can comment on or make changes to this bug.