Re: [chrony-dev] Seccomp issue on Alpine linux

2023-06-01 Thread Miroslav Lichvar
On Wed, May 31, 2023 at 04:54:09PM +0200, jvoisin wrote: > alpine:/home/jvoisin/chrony/test/system# cat tmp/chronyd.log > 2023-05-31T14:51:14Z chronyd version DEVELOPMENT starting (+CMDMON +NTP > +REFCLOCK +RTC -PRIVDROP +SCFILTER +SIGND +ASYNCDNS -NTS -SECHASH +IPV6 > -DEBUG) >

Re: [chrony-dev] Seccomp issue on Alpine linux

2023-06-01 Thread jvoisin
On 01/06/2023 13:59, Miroslav Lichvar wrote: > On Thu, Jun 01, 2023 at 01:51:27PM +0200, jvoisin wrote: >> On 01/06/2023 13:31, Miroslav Lichvar wrote: >>> On Thu, Jun 01, 2023 at 01:16:17PM +0200, jvoisin wrote: is there a way to tell the strace wrapper to follow children? >>> >>> Try

Re: [chrony-dev] Seccomp issue on Alpine linux

2023-06-01 Thread Miroslav Lichvar
On Thu, Jun 01, 2023 at 02:14:40PM +0200, jvoisin wrote: > alpine:/home/jvoisin/chrony/test/system# CHRONYD_WRAPPER="strace -f" > TEST_SCFILTER=1 ./002-extended Try removing TEST_SCFILTER=1. It might be interfering with strace. > Testing extended configuration: > non-default settings: >

Re: [chrony-dev] Seccomp issue on Alpine linux

2023-06-01 Thread jvoisin
On 01/06/2023 14:17, Miroslav Lichvar wrote: > On Thu, Jun 01, 2023 at 02:14:40PM +0200, jvoisin wrote: >> alpine:/home/jvoisin/chrony/test/system# CHRONYD_WRAPPER="strace -f" >> TEST_SCFILTER=1 ./002-extended > > Try removing TEST_SCFILTER=1. It might be interfering with strace. > >> Testing

[chrony-dev] [GIT] chrony/chrony.git branch master updated. 4.4-pre1-14-gca10b9e

2023-06-01 Thread git
This is an automated email from git. It was generated because a ref change was pushed to the "chrony/chrony.git" repository. The branch, master has been updated via ca10b9e0722acc5f055261e2337d48b930dbf114 (commit) via 19da1d95a80edd9ef77aae860e9e6551c6de1b3d (commit) via

Re: [chrony-dev] Seccomp issue on Alpine linux

2023-06-01 Thread Miroslav Lichvar
On Thu, Jun 01, 2023 at 02:20:13PM +0200, jvoisin wrote: > alpine:/home/jvoisin/chrony/test/system# grep -i ioctl tmp/chronyd.out > [pid 11833] ioctl(3, TIOCGWINSZ, 0x7fffa01bec58) = -1 ENOTTY (Not a tty) > [pid 11833] ioctl(5, TIOCGWINSZ, 0x7fffa01bec68) = -1 ENOTTY (Not a tty) > [pid 11833]

Re: [chrony-dev] Seccomp issue on Alpine linux

2023-06-01 Thread jvoisin
On 01/06/2023 13:10, Miroslav Lichvar wrote: > On Thu, Jun 01, 2023 at 01:04:43PM +0200, jvoisin wrote: >> Albeit we might want to restrict the parameters passed to ioctl, instead >> of allowing it unconditionally. > > Can you please run it under strace and see what ioctl it needs? > > #

Re: [chrony-dev] Seccomp issue on Alpine linux

2023-06-01 Thread Miroslav Lichvar
On Thu, Jun 01, 2023 at 01:16:17PM +0200, jvoisin wrote: > is there a way to tell the strace wrapper to follow children? Try CHRONYD_WRAPPER="strace -f" ./002-extended but you will need to terminate it manually (e.g. ctrl-c). -- Miroslav Lichvar -- To unsubscribe email

Re: [chrony-dev] Seccomp issue on Alpine linux

2023-06-01 Thread jvoisin
On 01/06/2023 13:31, Miroslav Lichvar wrote: > On Thu, Jun 01, 2023 at 01:16:17PM +0200, jvoisin wrote: >> is there a way to tell the strace wrapper to follow children? > > Try CHRONYD_WRAPPER="strace -f" ./002-extended > > but you will need to terminate it manually (e.g. ctrl-c). > ```

Re: [chrony-dev] Seccomp issue on Alpine linux

2023-06-01 Thread jvoisin
On 01/06/2023 08:37, Miroslav Lichvar wrote: > On Wed, May 31, 2023 at 04:54:09PM +0200, jvoisin wrote: >> alpine:/home/jvoisin/chrony/test/system# cat tmp/chronyd.log >> 2023-05-31T14:51:14Z chronyd version DEVELOPMENT starting (+CMDMON +NTP >> +REFCLOCK +RTC -PRIVDROP +SCFILTER +SIGND +ASYNCDNS

Re: [chrony-dev] Seccomp issue on Alpine linux

2023-06-01 Thread Miroslav Lichvar
On Thu, Jun 01, 2023 at 01:04:43PM +0200, jvoisin wrote: > Albeit we might want to restrict the parameters passed to ioctl, instead > of allowing it unconditionally. Can you please run it under strace and see what ioctl it needs? # CHRONYD_WRAPPER=strace ./002-extended # grep ioctl

Re: [chrony-dev] Seccomp issue on Alpine linux

2023-06-01 Thread Miroslav Lichvar
On Thu, Jun 01, 2023 at 01:51:27PM +0200, jvoisin wrote: > On 01/06/2023 13:31, Miroslav Lichvar wrote: > > On Thu, Jun 01, 2023 at 01:16:17PM +0200, jvoisin wrote: > >> is there a way to tell the strace wrapper to follow children? > > > > Try CHRONYD_WRAPPER="strace -f" ./002-extended > > > >