On 9/14/2023 4:49 PM, Dag-Erling Smørgrav wrote:
mike tancsa<[email protected]> writes: In main and stable/14, it enters capability mode immediately before the first attempt to read /etc/localtime, which fails:745 tcpdump 0.069967829 CALL cap_enter 745 tcpdump 0.070015646 RET cap_enter 0 745 tcpdump 0.070139522 CALL fstatat(AT_FDCWD,0x1c377723d38e,0x1c3773430d00 ,0) 745 tcpdump 0.070196299 NAMI "/etc/localtime" 745 tcpdump 0.070240578 RET fstatat -1 errno 94 Not permitted in capability mode 745 tcpdump 0.070487574 CALL fstatat(AT_FDCWD,0x1c377723d38e,0x1c3773430cd0,0) 745 tcpdump 0.070550458 NAMI "/etc/localtime" 745 tcpdump 0.070593003 RET fstatat -1 errno 94 Not permitted in capability mode The simplest workaround is to call tzset(3) before entering capability mode.
Thanks! Should open a PR about this ? ---Mike
