Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Seen Audit message issue in newer DHCPCD 10.0.10 version #474

Open
Sateesh-Patil opened this issue Feb 24, 2025 · 4 comments
Open

Seen Audit message issue in newer DHCPCD 10.0.10 version #474

Sateesh-Patil opened this issue Feb 24, 2025 · 4 comments

Comments

@Sateesh-Patil
Copy link

Created issue again as I dont have permission to reopen the similar issue which we have raised ealrier #460.

Currently seeing one more issue for syscall=224 and everytime getting different issue realted to seccomp.

audit: type=1326 audit(1739947623.368:2): auid=4294967295 uid=141 gid=141 ses=4294967295 subj=kernel pid=814 comm="dhcpcd" exe="/sbin/dhcpcd" sig=31 arch=40000003 syscall=224 compat=0 ip=0xb7f15549 code=0x0

We have used the __NR_gettid to resolve this issue, along with taking other changes as well, but the simulator still has the issue; there is no audit message now, but 'dhcpcd stopped running' at the bootup and ended up with no IP address. We are not sure cause of this issue.

Seen, all below seccomp definition as part of '#ifdef ASAN.'. Do we need define this somewhere or will it work for Simualator i686 which is x86_32 arch?

***/ These are for compiling with address sanitization */
#ifdef ASAN
#ifdef __NR_futex
SECCOMP_ALLOW(__NR_futex),
#endif
#ifdef __NR_openat
SECCOMP_ALLOW(__NR_openat),
#endif
#ifdef __NR_readlink
SECCOMP_ALLOW(__NR_readlink),
#endif
#ifdef __NR_sigaltstack
SECCOMP_ALLOW(__NR_sigaltstack),
#endif

/* coredumps /
#ifdef __NR_gettid
SECCOMP_ALLOW(__NR_gettid),
#endif
#ifdef __NR_tgkill
SECCOMP_ALLOW(__NR_tgkill),
#endif
#endif**

@rsmarples
Copy link
Member

You can comment in a closed ticket still and I can re-open it if justified.

Anyway, if you are not seeing any audit messages then i doubt seccomp is the issue.
To verify, disable it at the configure stage: ./configure --disable-seccomp.
If you still see a crash, then it's not seccomp.

Also, please state the dhcpcd version you are using

@Sateesh-Patil
Copy link
Author

You can comment in a closed ticket still and I can re-open it if justified.
Sure
Anyway, if you are not seeing any audit messages then i doubt seccomp is the issue. To verify, disable it at the configure stage: ./configure --disable-seccomp. If you still see a crash, then it's not seccomp.
Will try this
Also, please state the dhcpcd version you are using
dhcpcd 10.0.10 version

@rsmarples
Copy link
Member

OK, I'm going to need a bit more detail than "stopped running and didn't get an IP address".

I would advise to put this at the top of /etc/dhcpcd.conf

debug
logfile /var/log/dhcpcd.log

Then reboot and post the log here.
Hopefully that can tell us something

@Sateesh-Patil
Copy link
Author

Sure, will try again will provide debug logs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants