dhcpcd-discuss

Re: Please consider a different approach to syscall filtering on Linux

Roy Marples

Fri Oct 30 13:07:23 2020

On 30/10/2020 12:44, shibe@xxxxxxx wrote:
Note that you can use `strace` to figure out which syscall is failing. If needed with -f or -ff to also trace forked children.
I already recompiled it with --disable-privsep. Here is what I have in logs:

SECCOMP auid=0 uid=972 gid=972 ses=1 pid=8723 comm="dhcpcd" exe="/usr/bin/dhcpcd" sig=31 arch=40000028 syscall=289 compat=0 ip=0x76f1f94c code=0x0

Here, syscall 289 is "send", I think.

And BTW, Linux 5.4.72-1-ARCH armv7l
glibc 2.32

__NR_send was added long with some others to fix PPC here:
https://roy.marples.name/cgit/dhcpcd.git/commit/src/privsep-linux.c?id=b152e3eb9b6db28bb33f169c946a08d292c62af1

If you could test the git master branch it should be fixed, or at least progress further.

Let me know!

Roy

References:
Please consider a different approach to syscall filtering on Linuxshibe
Re: Please consider a different approach to syscall filtering on Linuxshibe
Re: Please consider a different approach to syscall filtering on Linuxshibe
Archive administrator: postmaster@marples.name