Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

We're experiencing unexpected JBoss crashes on a semi-regular basis. JBoss 5 is running on RHEL6 in this case.

I believe this is related to a sigusr1 sent to the JBoss process. The JBoss server logs simply end, nothing is logged at all regarding the shutdown. Manually sending sigusr1 reproduces the problem.

My question is what is the best way to determine what is sending this signal. Is it possible to use auditd to somehow trap these and log the sender?

Other suggestions for protecting the process from signals, what may randomly be sending sigusr1's on a RHEL6 machine or auditing and logging signals welcome.

Thanks

share|improve this question
    
My first question in cases like this is always "is SELinux enabled?". –  Janne Pikkarainen Sep 18 '12 at 10:52
    
SELinux is currently disabled; enabling it in permissive mode is an option. –  Antitribu Sep 18 '12 at 10:59

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.