Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Since Install of the Snap .sshguard #1

Open
MarcoMontana opened this issue Jan 28, 2022 · 1 comment
Open

Since Install of the Snap .sshguard #1

MarcoMontana opened this issue Jan 28, 2022 · 1 comment

Comments

@MarcoMontana
Copy link

MarcoMontana commented Jan 28, 2022

{ I am not a linux pro, or coder, just someone that finds all this stuff super interesting }

I am running a pihole raspberry pi updated and upgraded to newest kernel, I have also a dedicated pi for Wireguard clients pointed to the pilhole for DNS queries, for mobile devices.

I have a very high gvfsd-trash CPU usage after installation?

I have an error in the log output, I am uncertain if its something to worry about?

sudo snap logs sshguard-robertliu.sshguard
2022-01-28T11:16:44-05:00 sshguard-robertliu.sshguard[3378]: ERROR: ld.so: object '/usr/lib/arm-linux-gnueabihf/libarmmem-${PLATFORM}.so' from /etc/ld.so.preload cannot be preloaded (cannot open shared object file): ignored.
2022-01-28T11:16:44-05:00 sshguard-robertliu.sshguard[3378]: Chain INPUT (policy ACCEPT)
2022-01-28T11:16:44-05:00 sshguard-robertliu.sshguard[3378]: target prot opt source destination
2022-01-28T11:16:44-05:00 sshguard-robertliu.sshguard[3378]: Chain FORWARD (policy ACCEPT)
2022-01-28T11:16:44-05:00 sshguard-robertliu.sshguard[3378]: target prot opt source destination
2022-01-28T11:16:44-05:00 sshguard-robertliu.sshguard[3378]: Chain OUTPUT (policy ACCEPT)
2022-01-28T11:16:44-05:00 sshguard-robertliu.sshguard[3378]: target prot opt source destination
2022-01-28T11:16:44-05:00 sshguard-robertliu.sshguard[3378]: Chain sshguard (0 references)
2022-01-28T11:16:44-05:00 sshguard-robertliu.sshguard[3378]: target prot opt source destination
2022-01-28T11:16:44-05:00 sshguard-robertliu.sshguard[3378]: ERROR: ld.so: object '/usr/lib/arm-linux-gnueabihf/libarmmem-${PLATFORM}.so' from /etc/ld.so.preload cannot be preloaded (cannot open shared object file): ignored.

EDIT: After rebooting the system twice the gvfsd-trash use is now gone? Still no idea however if the snap sshguard is actually running with the above errors ty.

@tsunghanliu
Copy link
Owner

Hi @MarcoMontana ,

I have no clue why gvfsd-trash consumed a high CPU usage after installation.

On my Raspberry Pi 4 with Ubuntu Core 20, the log is:

2022-02-11T17:03:54+08:00 systemd[1]: Started Service for snap application sshguard-robertliu.sshguard.
2022-02-11T17:03:54+08:00 sshguard-robertliu.sshguard[3236245]: Chain INPUT (policy ACCEPT)
2022-02-11T17:03:54+08:00 sshguard-robertliu.sshguard[3236245]: target     prot opt source               destination
2022-02-11T17:03:54+08:00 sshguard-robertliu.sshguard[3236245]: sshguard   all  --  0.0.0.0/0            0.0.0.0/0
2022-02-11T17:03:54+08:00 sshguard-robertliu.sshguard[3236245]: Chain FORWARD (policy ACCEPT)
2022-02-11T17:03:54+08:00 sshguard-robertliu.sshguard[3236245]: target     prot opt source               destination
2022-02-11T17:03:54+08:00 sshguard-robertliu.sshguard[3236245]: Chain OUTPUT (policy ACCEPT)
2022-02-11T17:03:54+08:00 sshguard-robertliu.sshguard[3236245]: target     prot opt source               destination
2022-02-11T17:03:54+08:00 sshguard-robertliu.sshguard[3236245]: Chain sshguard (1 references)
2022-02-11T17:03:54+08:00 sshguard-robertliu.sshguard[3236245]: target     prot opt source               destination
2022-02-11T17:03:54+08:00 sshguard-robertliu.sshguard[3236240]: sshguard[3236240]: whitelist: add IPv4 block: 127.0.0.0 with mask 8.
2022-02-11T17:03:54+08:00 sshguard-robertliu.sshguard[3236240]: sshguard[3236240]: whitelist: skipping IPv4 block: 127.0.0.0/8 -- already present.
2022-02-11T17:03:54+08:00 sshguard-robertliu.sshguard[3236240]: sshguard[3236240]: whitelist: add '::1' as plain IPv6.
2022-02-11T17:03:54+08:00 sshguard-robertliu.sshguard[3236240]: sshguard[3236240]: whitelist: add plain IPv6 ::1.
2022-02-11T17:03:54+08:00 sshguard-robertliu.sshguard[3236240]: sshguard[3236240]: Now monitoring attacks.
2022-02-11T17:03:54+08:00 sshguard[3236240]: whitelist: add IPv4 block: 127.0.0.0 with mask 8.
2022-02-11T17:03:54+08:00 sshguard[3236240]: whitelist: skipping IPv4 block: 127.0.0.0/8 -- already present.
2022-02-11T17:03:54+08:00 sshguard[3236240]: whitelist: add '::1' as plain IPv6.
2022-02-11T17:03:54+08:00 sshguard[3236240]: whitelist: add plain IPv6 ::1.
2022-02-11T17:03:54+08:00 sshguard[3236240]: Now monitoring attacks.

From the log you provided, it seems to me that ERROR: ld.so: ... is a warning message which shows the system cannot find libarmmem-${PLATFORM}.so and ld.so.preload was ignored.
But I'm not sure if sshguard added the input chain successfully.

Can you provide the outputs of snap version and snap debug sandbox-features. Let's see if snap is full supported on you system.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants