[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
bug#56359: seccomp test failures on RHEL 9.0
From: |
Basil L. Contovounesios |
Subject: |
bug#56359: seccomp test failures on RHEL 9.0 |
Date: |
Sat, 20 Aug 2022 15:37:16 +0300 |
User-agent: |
Gnus/5.13 (Gnus v5.13) Emacs/29.0.50 (gnu/linux) |
Philipp Stephani [2022-07-16 12:50 +0200] wrote:
>> Am 16.07.2022 um 01:35 schrieb Glenn Morris <rgm@gnu.org>:
>>
>> Philipp Stephani wrote:
>>
>>> Does the attached patch fix the issue?
>>
>> Not entirely. I have to also allow "clone3", then it passes.
Just adding that I get the same on Debian:
test-out.log
Description: Text document
This with:
$ /lib/x86_64-linux-gnu/libc.so.6
GNU C Library (Debian GLIBC 2.34-3) stable release version 2.34.
Copyright (C) 2021 Free Software Foundation, Inc.
This is free software; see the source for copying conditions.
There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE.
Compiled by GNU CC version 11.3.0.
libc ABIs: UNIQUE IFUNC ABSOLUTE
> Hmm, I'm not sure we should allow clone3 unconditionally since it can do lots
> of
> things, and I'd expect that its capabilities will only grow over time. OTOH,
> BPF
> (or at least the libseccomp library) don't support pointer indirections which
> would be needed to inspect the structure fields. See
> https://lwn.net/Articles/822256/.
> Any opinions?
No opinion from me, but FWIW Docker seems to allow clone3 in its default
policy:
https://github.com/docker/docker-ce/commit/522fcd0056
https://github.com/containerd/containerd/pull/5982
Thanks,
--
Basil
In GNU Emacs 29.0.50 (build 1, x86_64-pc-linux-gnu, X toolkit, cairo version
1.16.0, Xaw3d scroll bars)
of 2022-08-20 built on tia
Repository revision: 3312710fd672021b17983ef2287dbd57a9a110a1
Repository branch: master
Windowing system distributor 'The X.Org Foundation', version 11.0.12101004
System Description: Debian GNU/Linux bookworm/sid
Configured using:
'configure 'CFLAGS=-Og -ggdb3' --config-cache --prefix=/home/blc/.local
--enable-checking=structs --with-file-notification=yes
--with-x-toolkit=lucid --with-x'
Configured features:
ACL CAIRO DBUS FREETYPE GIF GLIB GMP GNUTLS GPM GSETTINGS HARFBUZZ JPEG
JSON LCMS2 LIBOTF LIBSELINUX LIBSYSTEMD LIBXML2 M17N_FLT MODULES NOTIFY
INOTIFY PDUMPER PNG RSVG SECCOMP SOUND SQLITE3 THREADS TIFF
TOOLKIT_SCROLL_BARS WEBP X11 XAW3D XDBE XIM XINPUT2 XPM LUCID ZLIB
Important settings:
value of $LANG: en_IE.UTF-8
value of $XMODIFIERS: @im=ibus
locale-coding-system: utf-8-unix
Major mode: Lisp Interaction
Minor modes in effect:
tooltip-mode: t
global-eldoc-mode: t
eldoc-mode: t
show-paren-mode: t
electric-indent-mode: t
mouse-wheel-mode: t
tool-bar-mode: t
menu-bar-mode: t
file-name-shadow-mode: t
global-font-lock-mode: t
font-lock-mode: t
blink-cursor-mode: t
line-number-mode: t
indent-tabs-mode: t
transient-mark-mode: t
auto-composition-mode: t
auto-encryption-mode: t
auto-compression-mode: t
Load-path shadows:
None found.
Features:
(shadow sort mail-extr emacsbug message mailcap yank-media puny dired
dired-loaddefs rfc822 mml mml-sec password-cache epa derived epg rfc6068
epg-config gnus-util text-property-search time-date subr-x mm-decode
mm-bodies mm-encode mail-parse rfc2231 mailabbrev gmm-utils mailheader
cl-loaddefs cl-lib sendmail rfc2047 rfc2045 ietf-drums mm-util
mail-prsvr mail-utils rmc iso-transl tooltip eldoc paren electric
uniquify ediff-hook vc-hooks lisp-float-type elisp-mode mwheel
term/x-win x-win term/common-win x-dnd tool-bar dnd fontset image
regexp-opt fringe tabulated-list replace newcomment text-mode lisp-mode
prog-mode register page tab-bar menu-bar rfn-eshadow isearch easymenu
timer select scroll-bar mouse jit-lock font-lock syntax font-core
term/tty-colors frame minibuffer nadvice seq simple cl-generic
indonesian philippine cham georgian utf-8-lang misc-lang vietnamese
tibetan thai tai-viet lao korean japanese eucjp-ms cp51932 hebrew greek
romanian slovak czech european ethiopic indian cyrillic chinese
composite emoji-zwj charscript charprop case-table epa-hook
jka-cmpr-hook help abbrev obarray oclosure cl-preloaded button loaddefs
faces cus-face macroexp files window text-properties overlay sha1 md5
base64 format env code-pages mule custom widget keymap
hashtable-print-readable backquote threads dbusbind inotify lcms2
dynamic-setting system-font-setting font-render-setting cairo x-toolkit
xinput2 x multi-tty make-network-process emacs)
Memory information:
((conses 16 36336 7449)
(symbols 48 5084 0)
(strings 32 13829 1888)
(string-bytes 1 381827)
(vectors 16 9205)
(vector-slots 8 145425 12943)
(floats 8 23 25)
(intervals 56 236 0)
(buffers 992 10))
[Prev in Thread] |
Current Thread |
[Next in Thread] |
- bug#56359: seccomp test failures on RHEL 9.0,
Basil L. Contovounesios <=