Python3 core dump generated with Error: grsec: denied resource overstep by requesting

Products

• VMware NSX

Issue/Introduction

• Application on NSX node has crashed alarm is open on NSX Manager or NSX Edge node.
• syslog.log shows
  <TIMESTAMP> <HOSTNAME> kernel - - - [<number>] grsec: denied resource overstep by requesting <requesting> for RLIMIT_STACK against limit <limit> for /usr/bin/python3.8[python3:<pid>] uid/euid:0/0 gid/egid:0/0, parent /opt/vmware/nsx-node-api/bin/api_roothelper.sh[api_roothelper.:<pid>] uid/euid:0/0 gid/egid:0/0
<TIMESTAMP> <HOSTNAME> kernel - - - [<number>] grsec: Segmentation fault occurred at <address> in /usr/bin/python3.8[python3:<PID>] uid/euid:0/0 gid/egid:0/0, parent /opt/vmware/nsx-node-api/bin/api_roothelper.sh[api_roothelper.:<PID>] uid/euid:0/0 gid/egid:0/0
<TIMESTAMP> <HOSTNAME> NSX 3430843 - [nsx@6876 comp="nsx-manager" subcomp="node-mgmt" username="root" level="INFO"] Core dump generation received by process: <PID> [python3]
<TIMESTAMP> <HOSTNAME> NSX 3430843 - [nsx@6876 comp="nsx-manager" subcomp="node-mgmt" username="root" level="WARNING"] Core file generated: /var/log/core/core.python3.<number>.<PID>.0.11.gz

Environment

NSX 4.1

Cause

This issue is caused by underlying Python library.

Resolution

This issue is resolved in VMware NSX 4.2.0

The service is automatically restarted and there is no need for recovery. To resolve the alarm, follow Application on NSX node has crashed alarm