0

We deployed a networking application implemented in Java 8 on RHEL 7.1. Periodically, the application gets stuck attempting to communicate on non-standard ports. Is there any way to determine if other processes, such as anti-virus, etc., is blocking or interfering with our application?

SAFX
  • 121
  • 1
  • 9
  • have you installed antivirus on Redhat? the only time that I seen antivirus on Linux was on mailserver for mail virus scanning. – c4f4t0r Nov 11 '15 at 14:45
  • Did you check the selinux audit log? Did you make a list of which processes listen on which ports? – JayMcTee Nov 11 '15 at 14:45
  • using Qualsys only; this turned out to be a separate issue not related to security or scanning software, but thank you. – SAFX Nov 12 '15 at 02:17

1 Answers1

3

The place to look would be the logs. On recent versions of EL that would be in /var/log. If SELinux is enabled (see getenforce(1) ) I would take a long hard look at /var/log/audit/audit.log (and any previous versions you find there).

In particular look for AVC denied messages these should let you know if SELinux is playing a part in you troubles.

Solving the problem depends upon what you find.

user9517
  • 115,471
  • 20
  • 215
  • 297