On 13/11/2020 12:23, Alejandro Taboada wrote: > Maybe Corocync is not using peer communication? Could you check someway the > packet source address .. if it’s form localhost just allow, other check > permissions > I know is not ideal but will solve a tot of production issues in the > meanwhile. > > >> On 12 Nov 2020, at 23:20, Alejandro Taboada <alejandro.tabo...@altipeak.com> >> wrote: >> >> <PastedGraphic-1.png> > > I'm not sure I understand what we need to look for.
Aren't they communicating via UNIX sockets from abstract namespaces (@cib_rw@, @attrd@, etc.) ? That's what I see when I strace calls to "crm resource cleanup <resource>" which also fails with the patched version.
signature.asc
Description: OpenPGP digital signature
