Output of issec Does Not Show Kernel or Version Information

Products

• CA Privileged Identity Management Endpoint (PIM)

Issue/Introduction

After upgrading to 12.81.0.4260 for 3.10.0-1160.62.1.el7.x86_64 kernel support, issec does not show the version information.

When the 4260 build is running on an older kernel, the output is correct.

# uname -a
Linux renktest 3.10.0-957.27.2.el7.x86_64 #1 SMP Mon Jul 29 17:46:05 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux
# issec
CA ControlMinder version 12.8 installed in /opt/CA/AccessControl
VeRsIoN: 12.81-0 (4260) Compiled On:May 11 2022 21:20:12  Kernel: 3.10.0-862.el7.x86_64-RH75 _LINUX70-3100-862-RHELX86_64.X86_64 STOP 30034
CA ControlMinder kernel extension is loaded.
CA ControlMinder daemons are not running.

After the OS kernel is upgraded to 3.10.0-1160.62.1.el7.x86_64 (or CentOS 3.10.0-1160.66.1.el7.x86_64), the issec output stops showing the kernel and version information.

# uname -a
Linux renktest 3.10.0-1160.66.1.el7.x86_64 #1 SMP Wed May 18 16:02:34 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux
[root@renktest060789 tmp]# issec
CA ControlMinder version 12.8 installed in /opt/CA/AccessControl
CA ControlMinder kernel extension is loaded.
CA ControlMinder daemons are not running.

Environment

Privileged Identity Manager 12.8 SP1

Cause

The issue was caused by a buffer overrun in the se_loadtest binary, which is called as part of issec. It can be reproduced by running the command independently, which results in a segmentation fault.

# /opt/CA/AccessControl/lbin/se_loadtest  GetKernelVersion
VeRsIoN: 12.81-0 (4260) Compiled On:May 11 2022 21:20:36  Kernel: 3.10.0-1160.62.1.el7.x86_64-RH79 _LINUX70-3100-1160-62-1-RHELX86_64.X86_64Ru 30034
Segmentation fault (core dumped)

Resolution

Fix T5C1184 was created to resolve the issue. The build of the fix is 12.81.0.4263, any installation with a higher build number will have the fix included.

# ./issec
CA ControlMinder version 12.8 installed in /opt/CA/AccessControl
VeRsIoN: 12.81-0 (4260) Compiled On:May 11 2022 21:20:36  Kernel: 3.10.0-1160.62.1.el7.x86_64-RH79 _LINUX70-3100-1160-62-1-RHELX86_64.X86_64 STOP 30034
CA ControlMinder kernel extension is loaded.