Troubleshooting System Security Checker

Available in Classic and VPC

This document details the problems users may face while using System Security Checker along with the causes and resolutions. However, some problems may be difficult for users to handle themselves, even with the following information at hand. To efficiently address these user difficulties, NAVER Cloud Platform also provides various channels to resolve them.

The ERROR(update doesn't running) message appears upon server inspection.

If the following error message appears while running the agent to inspect servers, please check the cause and solutions

root@hostname ~]# ./ncp_secuagent
[Project : linux] => Fail => [stdout]: ERROR(update doesn't running) : cmd(yum install perl-libwww-perl) not work.

Cause

In order to inspect server security with System Security Checker, you must install the perl-related package. If you fail to install the perl-related package with yum command, the error occurs.

Solution

The solutions are the following:

1. Run the following commands to check the per-related package's status.

   • If the Error: rpmdb open failed message shows, it is an rpmdb error.

   # yum list | grep perl-libwww-perl
   error: rpmdb: BDB0113 Thread/process 14277/139717220628288 failed: BDB1507 Thread died in Berkeley DB library
   error: db5 error(-30973) from dbenv->failchk: BDB0087 DB_RUNRECOVERY: Fatal error, run database recovery
   error: cannot open Packages index using db5 -  (-30973)
   error: cannot open Packages database in /var/lib/rpm
   CRITICAL:yum.main:
   
   Error: rpmdb open failed
   

2. In case of an rpmdb error, reset the rpmdb by running the following command.

   # rm -f /var/lib/rpm/__db*
   
   # rpm -vv --rebuilddb
   

The server's CentOS-Base.repo file has changed.

if the /etc/yum.repos.d/CentOS-Base.repo file has changed after running the System Security Checker agent, please check the cause and solutions.

Cause

If you cannot download packages from the basic repository due to Internet disconnection in a secure zone or isolated net, edit the CentOS-Base.repo file temporarily to download packages from the repository separately built within the NAVER Cloud Platform.
However, if the temporarily edited CentOS-Base.repo file couldn’t be restored back to original due to abnormal termination or such, the CentOS-Base.repo may stay as changed.

Solution

Run the following commands to restore the CentOS-Base.repo file back to original using the backup files.

mv -f /etc/yum.repos.d/CentOS-Base.repo_backup /etc/yum.repos.d/CentOS-Base.repo