Skip to content

Seen Audit message issue in newer DHCPCD 10.0.10 version #474

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Sateesh-Patil opened this issue Feb 24, 2025 · 5 comments
Open

Seen Audit message issue in newer DHCPCD 10.0.10 version #474

Sateesh-Patil opened this issue Feb 24, 2025 · 5 comments

Comments

@Sateesh-Patil
Copy link

Created issue again as I dont have permission to reopen the similar issue which we have raised ealrier #460.

Currently seeing one more issue for syscall=224 and everytime getting different issue realted to seccomp.

audit: type=1326 audit(1739947623.368:2): auid=4294967295 uid=141 gid=141 ses=4294967295 subj=kernel pid=814 comm="dhcpcd" exe="/sbin/dhcpcd" sig=31 arch=40000003 syscall=224 compat=0 ip=0xb7f15549 code=0x0

We have used the __NR_gettid to resolve this issue, along with taking other changes as well, but the simulator still has the issue; there is no audit message now, but 'dhcpcd stopped running' at the bootup and ended up with no IP address. We are not sure cause of this issue.

Seen, all below seccomp definition as part of '#ifdef ASAN.'. Do we need define this somewhere or will it work for Simualator i686 which is x86_32 arch?

***/ These are for compiling with address sanitization */
#ifdef ASAN
#ifdef __NR_futex
SECCOMP_ALLOW(__NR_futex),
#endif
#ifdef __NR_openat
SECCOMP_ALLOW(__NR_openat),
#endif
#ifdef __NR_readlink
SECCOMP_ALLOW(__NR_readlink),
#endif
#ifdef __NR_sigaltstack
SECCOMP_ALLOW(__NR_sigaltstack),
#endif

/* coredumps /
#ifdef __NR_gettid
SECCOMP_ALLOW(__NR_gettid),
#endif
#ifdef __NR_tgkill
SECCOMP_ALLOW(__NR_tgkill),
#endif
#endif**

@rsmarples
Copy link
Member

You can comment in a closed ticket still and I can re-open it if justified.

Anyway, if you are not seeing any audit messages then i doubt seccomp is the issue.
To verify, disable it at the configure stage: ./configure --disable-seccomp.
If you still see a crash, then it's not seccomp.

Also, please state the dhcpcd version you are using

@Sateesh-Patil
Copy link
Author

You can comment in a closed ticket still and I can re-open it if justified.
Sure
Anyway, if you are not seeing any audit messages then i doubt seccomp is the issue. To verify, disable it at the configure stage: ./configure --disable-seccomp. If you still see a crash, then it's not seccomp.
Will try this
Also, please state the dhcpcd version you are using
dhcpcd 10.0.10 version

@rsmarples
Copy link
Member

OK, I'm going to need a bit more detail than "stopped running and didn't get an IP address".

I would advise to put this at the top of /etc/dhcpcd.conf

debug
logfile /var/log/dhcpcd.log

Then reboot and post the log here.
Hopefully that can tell us something

@Sateesh-Patil
Copy link
Author

Sure, will try again will provide debug logs

@Sateesh-Patil
Copy link
Author

Sateesh-Patil commented Mar 11, 2025

We have tried with 'seccomp' disable as suggested above and ran the test with debug logs.
Please find the below logs and seen ps_root_writeerror below and there is no dhcpcd process running after this and device not getting any ip address

EXTRA_OECONF = "--enable-ipv4
--dbdir=${DBDIR}
--sbindir=${base_sbindir}
--runstatedir=/run
--enable-privsep
--privsepuser=dhcpcd
--with-hooks
--with-eghooks
--disable-seccomp
"

cat /tmp/dhcpcd_debug.log
[root@HPI0076B3 ]# cat /tmp/dhcpcd_debug.log
Mar 11 03:47:35 [813]: dhcpcd-10.0.10 starting
Mar 11 03:47:35 [813]: chrooting as dhcpcd to /var/lib/dhcpcd
Mar 11 03:47:35 [813]: sandbox: posix resource limited
Mar 11 03:47:35 [816]: spawned manager process on PID 816
Mar 11 03:47:35 [816]: spawned privileged proxy on PID 817
Mar 11 03:47:35 [816]: spawned network proxy on PID 818
Mar 11 03:47:35 [816]: spawned controller proxy on PID 819
Mar 11 03:47:35 [813]: forked to background
Mar 11 03:47:35 [816]: eth0: executing: /usr/libexec/dhcpcd-run-hooks PREINIT
Mar 11 03:47:35 [816]: eth0: executing: /usr/libexec/dhcpcd-run-hooks CARRIER
Mar 11 03:47:35 [816]: DUID 00:01:00:01:2f:62:6e:d7:52:54:cb:00:76:b3
Mar 11 03:47:35 [816]: eth0: IAID cb:00:76:b3
Mar 11 03:47:35 [816]: eth0: delaying IPv6 Router Solicitation for LL address
Mar 11 03:47:35 [816]: eth0: delaying DHCPv6 for LL address
Mar 11 03:47:35 [816]: eth0: delaying IPv4 for 2.0 seconds
Mar 11 03:47:37 [816]: eth0: delaying IPv6 router solicitation for 0.2 seconds
Mar 11 03:47:37 [816]: eth0: reading lease: /var/lib/dhcpcd/eth0.lease6
Mar 11 03:47:37 [816]: eth0: soliciting a DHCPv6 lease
Mar 11 03:47:37 [816]: eth0: delaying SOLICIT6 (xid 0xf46b9c), next in 1.1 seconds
Mar 11 03:47:37 [817]: eth0: spawned DHCP6 proxy fe80::5054:cbff:fe00:76b3 on PID 1112
Mar 11 03:47:37 [816]: eth0: using ClientID 01:52:54:cb:00:76:b3
Mar 11 03:47:37 [816]: eth0: reading lease: /var/lib/dhcpcd/eth0.lease
Mar 11 03:47:37 [816]: eth0: soliciting a DHCP lease
Mar 11 03:47:37 [817]: eth0: spawned BPF BOOTP on PID 1116
Mar 11 03:47:37 [816]: eth0: sending DISCOVER (xid 0x83dfc3a2), next in 4.6 seconds
Mar 11 03:47:37 [816]: eth0: soliciting an IPv6 router
Mar 11 03:47:37 [816]: eth0: sending Router Solicitation
Mar 11 03:47:38 [816]: eth0: multicasting SOLICIT6 (xid 0xf46b9c), next in 1.0 seconds
Mar 11 03:47:39 [816]: eth0: multicasting SOLICIT6 (xid 0xf46b9c), next in 2.0 seconds
Mar 11 03:47:40 [816]: eth0: offered 10.224.1.100 from 10.224.1.1
Mar 11 03:47:40 [816]: eth0: sending REQUEST (xid 0x83dfc3a2), next in 5.0 seconds
Mar 11 03:47:40 [817]: eth0: process BPF BOOTP already started on pid 1116
Mar 11 03:47:40 [816]: eth0: acknowledged 10.224.1.100 from 10.224.1.1
Mar 11 03:47:40 [817]: eth0: spawned BPF ARP 10.224.1.100 on PID 1131
Mar 11 03:47:40 [816]: eth0: probing address 10.224.1.100/24
Mar 11 03:47:40 [816]: eth0: probing for 10.224.1.100
Mar 11 03:47:40 [816]: eth0: ARP probing 10.224.1.100 (1 of 3), next in 1.4 seconds
Mar 11 03:47:41 [816]: eth0: multicasting SOLICIT6 (xid 0xf46b9c), next in 3.7 seconds
Mar 11 03:47:41 [816]: eth0: sending Router Solicitation
Mar 11 03:47:41 [816]: eth0: ARP probing 10.224.1.100 (2 of 3), next in 1.7 seconds
Mar 11 03:47:43 [816]: eth0: ARP probing 10.224.1.100 (3 of 3), next in 2.0 seconds
Mar 11 03:47:43 [816]: control command: dhcpcd -q -U eth0
Mar 11 03:47:43 [1374]: sending commands to dhcpcd process
Mar 11 03:47:43 [1374]: send OK
Mar 11 03:47:43 [816]: control command: dhcpcd eth0
Mar 11 03:47:43 [816]: eth0: executing: /usr/libexec/dhcpcd-run-hooks PREINIT
Mar 11 03:47:44 [816]: control command: dhcpcd -q -U eth0
Mar 11 03:47:44 [816]: control command: dhcpcd -q -U eth0
Mar 11 03:47:44 [816]: control command: dhcpcd -q -U eth0
Mar 11 03:47:44 [1451]: sending commands to dhcpcd process
Mar 11 03:47:44 [1451]: send OK
Mar 11 03:47:44 [816]: control command: dhcpcd eth0
Mar 11 03:47:44 [816]: eth0: executing: /usr/libexec/dhcpcd-run-hooks PREINIT
Mar 11 03:47:44 [816]: eth0: multicasting SOLICIT6 (xid 0xf46b9c), next in 6.7 seconds
Mar 11 03:47:45 [816]: eth0: DAD completed for 10.224.1.100
Mar 11 03:47:45 [816]: eth0: leased 10.224.1.100 for 3600 seconds
Mar 11 03:47:45 [816]: eth0: renew in 1800 seconds, rebind in 3150 seconds
Mar 11 03:47:45 [816]: eth0: writing lease: /var/lib/dhcpcd/eth0.lease
Mar 11 03:47:45 [816]: eth0: adding IP address 10.224.1.100/24 broadcast 10.224.1.255
Mar 11 03:47:45 [816]: eth0: adding route to 10.224.1.0/24
Mar 11 03:47:45 [816]: eth0: adding default route via 10.224.1.1
Mar 11 03:47:45 [816]: eth0: ARP announcing 10.224.1.100 (1 of 2), next in 2.0 seconds
Mar 11 03:47:45 [816]: eth0: executing: /usr/libexec/dhcpcd-run-hooks BOUND
Mar 11 03:47:45 [1618]: sending signal HUP to pid 816
Mar 11 03:47:45 [816]: received SIGHUP, rebinding
Mar 11 03:47:45 [816]: eth0: executing: /usr/libexec/dhcpcd-run-hooks RECONFIGURE
Mar 11 03:47:45 [816]: eth0: config file changed, expiring leases
Mar 11 03:47:45 [816]: eth0: deleting IP address 10.224.1.100/24
Mar 11 03:47:45 [816]: eth0: deleting route to 10.224.1.0/24
Mar 11 03:47:45 [817]: eth0: BPF ARP 10.224.1.100 exited from PID 1131
Mar 11 03:47:45 [816]: eth0: deleting default route via 10.224.1.1
Mar 11 03:47:45 [816]: eth0: executing: /usr/libexec/dhcpcd-run-hooks EXPIRE
Mar 11 03:47:45 [817]: ps_root_writeerror: result=0, data=(nil), len=0: Broken pipe
Mar 11 03:47:45 [817]: ps_root_recvmsg: Broken pipe
Mar 11 03:47:45 [816]: script_runreason: No such process
Mar 11 03:47:45 [816]: eth0: IAID cb:00:76:b3
Mar 11 03:47:45 [816]: eth0: delaying IPv6 router solicitation for 0.1 seconds

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants