Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We're experiencing unexpected JBoss crashes on a semi-regular basis. JBoss 5 is running on RHEL6 in this case.

I believe this is related to a sigusr1 sent to the JBoss process. The JBoss server logs simply end, nothing is logged at all regarding the shutdown. Manually sending sigusr1 reproduces the problem.

My question is what is the best way to determine what is sending this signal. Is it possible to use auditd to somehow trap these and log the sender?

Other suggestions for protecting the process from signals, what may randomly be sending sigusr1's on a RHEL6 machine or auditing and logging signals welcome.


share|improve this question
My first question in cases like this is always "is SELinux enabled?". – Janne Pikkarainen Sep 18 '12 at 10:52
SELinux is currently disabled; enabling it in permissive mode is an option. – Antitribu Sep 18 '12 at 10:59

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.