The workers seem to be created exactly every five minutes and trigger an 
apparmor denial like:
type=AVC msg=audit(1793660443.048:53435): apparmor="DENIED" 
operation="file_receive" class="file" profile="samba-rpcd" 
name="/run/samba/ncalrpc/np/samr" pid=231432 comm="rpcd_lsad" 
requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0
type=SYSCALL msg=audit(1793660743.052:53437): arch=c000003e syscall=47 
success=yes exit=811 a0=6 a1=7ffcbc8e8d90 a2=0 a3=0 items=0 ppid=2568 
pid=231516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 
fsgid=0 tty=(none) ses=4294967295 comm="rpcd_lsad" exe="/usr/libexec/samba/rpcd_

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2172818

Title:
  winbind accumulates thousands of rpcd_lsad workers and uses 5.2 GiB
  RAM

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/2172818/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to