Re: Please consider a different approach to syscall filtering on Linux
Roy Marples
Fri Oct 30 13:07:23 2020On 30/10/2020 12:44, shibe@xxxxxxx wrote:
Note that you can use `strace` to figure out which syscall is failing. If needed with -f or -ff to also trace forked children. I already recompiled it with --disable-privsep. Here is what I have in logs: SECCOMP auid=0 uid=972 gid=972 ses=1 pid=8723 comm="dhcpcd" exe="/usr/bin/dhcpcd" sig=31 arch=40000028 syscall=289 compat=0 ip=0x76f1f94c code=0x0 Here, syscall 289 is "send", I think. And BTW, Linux 5.4.72-1-ARCH armv7l glibc 2.32
__NR_send was added long with some others to fix PPC here: https://roy.marples.name/cgit/dhcpcd.git/commit/src/privsep-linux.c?id=b152e3eb9b6db28bb33f169c946a08d292c62af1If you could test the git master branch it should be fixed, or at least progress further.
Let me know! Roy
Archive administrator: postmaster@marples.name