Summary
There are times wherein the entity process crashes, but the core dump file is not generated. Under this circumstance, it will be hard for Trend Micro Technical Support to do a check without core dump.
This article shows how to enable core dump for this particular case.
Details
Below is a sample of the messages log you will see:
Jul 7 17:00:01 ws0432 splx_entity: [02180:02180] main: Grand child process abort, signal num(6) Jul 8 19:58:03 ws0432 splx_entity: [02225:02225] main: Grand child process abort, signal num(6) --cut-- Jul 10 02:02:18 ws0432 splx_entity: [02225:02225] main: Grand child process abort, signal num(6)
You will also see an entity dump file that was detected by the abrt command in the entity log. Below is a sample:
Jul 10 05:51:03 ws0432 abrt[29967]: Saved core dump of pid 28004 (/opt/TrendMicro/SProtectLinux/SPLX.vsapiapp/entity) to /var/spool/abrt/ccpp-2016-07-10-05:50:56-28004 (4240019456 bytes) Jul 10 05:51:03 ws0432 abrtd: Directory 'ccpp-2016-07-10-05:50:56-28004' creation detected
In such conditions, change the value of the "OpenGPGCheck" item in the /etc/abrt/abrt-action-save-package-data.conf file to "no" to generate the dump file.
