Output of issec Does Not Show Kernel or Version Information

book

Article ID: 242406

calendar_today

Updated On:

Products

CA Privileged Identity Management Endpoint (PIM)

Issue/Introduction

After upgrading to 12.81.0.4260 for 3.10.0-1160.62.1.el7.x86_64 kernel support, issec does not show the version information.

When the 4260 build is running on an older kernel, the output is correct.

# uname -a
Linux renktest 3.10.0-957.27.2.el7.x86_64 #1 SMP Mon Jul 29 17:46:05 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux
# issec
CA ControlMinder version 12.8 installed in /opt/CA/AccessControl
VeRsIoN: 12.81-0 (4260) Compiled On:May 11 2022 21:20:12  Kernel: 3.10.0-862.el7.x86_64-RH75 _LINUX70-3100-862-RHELX86_64.X86_64 STOP 30034
CA ControlMinder kernel extension is loaded.
CA ControlMinder daemons are not running.

After the OS kernel is upgraded to 3.10.0-1160.62.1.el7.x86_64 (or CentOS 3.10.0-1160.66.1.el7.x86_64), the issec output stops showing the kernel and version information.

# uname -a
Linux renktest 3.10.0-1160.66.1.el7.x86_64 #1 SMP Wed May 18 16:02:34 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux
[[email protected] tmp]# issec
CA ControlMinder version 12.8 installed in /opt/CA/AccessControl
CA ControlMinder kernel extension is loaded.
CA ControlMinder daemons are not running.

Cause

The issue was caused by a buffer overrun in the se_loadtest binary, which is called as part of issec. It can be reproduced by running the command independently, which results in a segmentation fault.

# /opt/CA/AccessControl/lbin/se_loadtest  GetKernelVersion
VeRsIoN: 12.81-0 (4260) Compiled On:May 11 2022 21:20:36  Kernel: 3.10.0-1160.62.1.el7.x86_64-RH79 _LINUX70-3100-1160-62-1-RHELX86_64.X86_64Ru 30034
Segmentation fault (core dumped)

Environment

Privileged Identity Manager 12.8 SP1

Resolution

Fix T5C1184 was created to resolve the issue. The build of the fix is 12.81.0.4263, any installation with a higher build number will have the fix included.

# ./issec
CA ControlMinder version 12.8 installed in /opt/CA/AccessControl
VeRsIoN: 12.81-0 (4260) Compiled On:May 11 2022 21:20:36  Kernel: 3.10.0-1160.62.1.el7.x86_64-RH79 _LINUX70-3100-1160-62-1-RHELX86_64.X86_64 STOP 30034
CA ControlMinder kernel extension is loaded.