dhcpcd icon indicating copy to clipboard operation
dhcpcd copied to clipboard

Seen Audit message issue in newer DHCPCD 10.0.10 version

Open Sateesh-Patil opened this issue 10 months ago • 7 comments

Created issue again as I dont have permission to reopen the similar issue which we have raised ealrier https://github.com/NetworkConfiguration/dhcpcd/issues/460.

Currently seeing one more issue for syscall=224 and everytime getting different issue realted to seccomp.

audit: type=1326 audit(1739947623.368:2): auid=4294967295 uid=141 gid=141 ses=4294967295 subj=kernel pid=814 comm="dhcpcd" exe="/sbin/dhcpcd" sig=31 arch=40000003 syscall=224 compat=0 ip=0xb7f15549 code=0x0

We have used the __NR_gettid to resolve this issue, along with taking other changes as well, but the simulator still has the issue; there is no audit message now, but 'dhcpcd stopped running' at the bootup and ended up with no IP address. We are not sure cause of this issue.

Seen, all below seccomp definition as part of '#ifdef ASAN.'. Do we need define this somewhere or will it work for Simualator i686 which is x86_32 arch?

***/ These are for compiling with address sanitization */ #ifdef ASAN #ifdef __NR_futex SECCOMP_ALLOW(__NR_futex), #endif #ifdef __NR_openat SECCOMP_ALLOW(__NR_openat), #endif #ifdef __NR_readlink SECCOMP_ALLOW(__NR_readlink), #endif #ifdef __NR_sigaltstack SECCOMP_ALLOW(__NR_sigaltstack), #endif

/* coredumps / #ifdef __NR_gettid SECCOMP_ALLOW(__NR_gettid), #endif #ifdef __NR_tgkill SECCOMP_ALLOW(__NR_tgkill), #endif #endif**

Sateesh-Patil avatar Feb 24 '25 02:02 Sateesh-Patil

You can comment in a closed ticket still and I can re-open it if justified.

Anyway, if you are not seeing any audit messages then i doubt seccomp is the issue. To verify, disable it at the configure stage: ./configure --disable-seccomp. If you still see a crash, then it's not seccomp.

Also, please state the dhcpcd version you are using

rsmarples avatar Feb 24 '25 07:02 rsmarples

You can comment in a closed ticket still and I can re-open it if justified. Sure Anyway, if you are not seeing any audit messages then i doubt seccomp is the issue. To verify, disable it at the configure stage: ./configure --disable-seccomp. If you still see a crash, then it's not seccomp. Will try this Also, please state the dhcpcd version you are using dhcpcd 10.0.10 version

Sateesh-Patil avatar Feb 26 '25 04:02 Sateesh-Patil

OK, I'm going to need a bit more detail than "stopped running and didn't get an IP address".

I would advise to put this at the top of /etc/dhcpcd.conf

debug
logfile /var/log/dhcpcd.log

Then reboot and post the log here. Hopefully that can tell us something

rsmarples avatar Feb 27 '25 17:02 rsmarples

Sure, will try again will provide debug logs

Sateesh-Patil avatar Mar 05 '25 11:03 Sateesh-Patil

We have tried with 'seccomp' disable as suggested above and ran the test with debug logs. Please find the below logs and seen ps_root_writeerror below and there is no dhcpcd process running after this and device not getting any ip address

EXTRA_OECONF = "--enable-ipv4
--dbdir=${DBDIR}
--sbindir=${base_sbindir}
--runstatedir=/run
--enable-privsep
--privsepuser=dhcpcd
--with-hooks
--with-eghooks
--disable-seccomp
"

cat /tmp/dhcpcd_debug.log [root@HPI0076B3 ]# cat /tmp/dhcpcd_debug.log Mar 11 03:47:35 [813]: dhcpcd-10.0.10 starting Mar 11 03:47:35 [813]: chrooting as dhcpcd to /var/lib/dhcpcd Mar 11 03:47:35 [813]: sandbox: posix resource limited Mar 11 03:47:35 [816]: spawned manager process on PID 816 Mar 11 03:47:35 [816]: spawned privileged proxy on PID 817 Mar 11 03:47:35 [816]: spawned network proxy on PID 818 Mar 11 03:47:35 [816]: spawned controller proxy on PID 819 Mar 11 03:47:35 [813]: forked to background Mar 11 03:47:35 [816]: eth0: executing: /usr/libexec/dhcpcd-run-hooks PREINIT Mar 11 03:47:35 [816]: eth0: executing: /usr/libexec/dhcpcd-run-hooks CARRIER Mar 11 03:47:35 [816]: DUID 00:01:00:01:2f:62:6e:d7:52:54:cb:00:76:b3 Mar 11 03:47:35 [816]: eth0: IAID cb:00:76:b3 Mar 11 03:47:35 [816]: eth0: delaying IPv6 Router Solicitation for LL address Mar 11 03:47:35 [816]: eth0: delaying DHCPv6 for LL address Mar 11 03:47:35 [816]: eth0: delaying IPv4 for 2.0 seconds Mar 11 03:47:37 [816]: eth0: delaying IPv6 router solicitation for 0.2 seconds Mar 11 03:47:37 [816]: eth0: reading lease: /var/lib/dhcpcd/eth0.lease6 Mar 11 03:47:37 [816]: eth0: soliciting a DHCPv6 lease Mar 11 03:47:37 [816]: eth0: delaying SOLICIT6 (xid 0xf46b9c), next in 1.1 seconds Mar 11 03:47:37 [817]: eth0: spawned DHCP6 proxy fe80::5054:cbff:fe00:76b3 on PID 1112 Mar 11 03:47:37 [816]: eth0: using ClientID 01:52:54:cb:00:76:b3 Mar 11 03:47:37 [816]: eth0: reading lease: /var/lib/dhcpcd/eth0.lease Mar 11 03:47:37 [816]: eth0: soliciting a DHCP lease Mar 11 03:47:37 [817]: eth0: spawned BPF BOOTP on PID 1116 Mar 11 03:47:37 [816]: eth0: sending DISCOVER (xid 0x83dfc3a2), next in 4.6 seconds Mar 11 03:47:37 [816]: eth0: soliciting an IPv6 router Mar 11 03:47:37 [816]: eth0: sending Router Solicitation Mar 11 03:47:38 [816]: eth0: multicasting SOLICIT6 (xid 0xf46b9c), next in 1.0 seconds Mar 11 03:47:39 [816]: eth0: multicasting SOLICIT6 (xid 0xf46b9c), next in 2.0 seconds Mar 11 03:47:40 [816]: eth0: offered 10.224.1.100 from 10.224.1.1 Mar 11 03:47:40 [816]: eth0: sending REQUEST (xid 0x83dfc3a2), next in 5.0 seconds Mar 11 03:47:40 [817]: eth0: process BPF BOOTP already started on pid 1116 Mar 11 03:47:40 [816]: eth0: acknowledged 10.224.1.100 from 10.224.1.1 Mar 11 03:47:40 [817]: eth0: spawned BPF ARP 10.224.1.100 on PID 1131 Mar 11 03:47:40 [816]: eth0: probing address 10.224.1.100/24 Mar 11 03:47:40 [816]: eth0: probing for 10.224.1.100 Mar 11 03:47:40 [816]: eth0: ARP probing 10.224.1.100 (1 of 3), next in 1.4 seconds Mar 11 03:47:41 [816]: eth0: multicasting SOLICIT6 (xid 0xf46b9c), next in 3.7 seconds Mar 11 03:47:41 [816]: eth0: sending Router Solicitation Mar 11 03:47:41 [816]: eth0: ARP probing 10.224.1.100 (2 of 3), next in 1.7 seconds Mar 11 03:47:43 [816]: eth0: ARP probing 10.224.1.100 (3 of 3), next in 2.0 seconds Mar 11 03:47:43 [816]: control command: dhcpcd -q -U eth0 Mar 11 03:47:43 [1374]: sending commands to dhcpcd process Mar 11 03:47:43 [1374]: send OK Mar 11 03:47:43 [816]: control command: dhcpcd eth0 Mar 11 03:47:43 [816]: eth0: executing: /usr/libexec/dhcpcd-run-hooks PREINIT Mar 11 03:47:44 [816]: control command: dhcpcd -q -U eth0 Mar 11 03:47:44 [816]: control command: dhcpcd -q -U eth0 Mar 11 03:47:44 [816]: control command: dhcpcd -q -U eth0 Mar 11 03:47:44 [1451]: sending commands to dhcpcd process Mar 11 03:47:44 [1451]: send OK Mar 11 03:47:44 [816]: control command: dhcpcd eth0 Mar 11 03:47:44 [816]: eth0: executing: /usr/libexec/dhcpcd-run-hooks PREINIT Mar 11 03:47:44 [816]: eth0: multicasting SOLICIT6 (xid 0xf46b9c), next in 6.7 seconds Mar 11 03:47:45 [816]: eth0: DAD completed for 10.224.1.100 Mar 11 03:47:45 [816]: eth0: leased 10.224.1.100 for 3600 seconds Mar 11 03:47:45 [816]: eth0: renew in 1800 seconds, rebind in 3150 seconds Mar 11 03:47:45 [816]: eth0: writing lease: /var/lib/dhcpcd/eth0.lease Mar 11 03:47:45 [816]: eth0: adding IP address 10.224.1.100/24 broadcast 10.224.1.255 Mar 11 03:47:45 [816]: eth0: adding route to 10.224.1.0/24 Mar 11 03:47:45 [816]: eth0: adding default route via 10.224.1.1 Mar 11 03:47:45 [816]: eth0: ARP announcing 10.224.1.100 (1 of 2), next in 2.0 seconds Mar 11 03:47:45 [816]: eth0: executing: /usr/libexec/dhcpcd-run-hooks BOUND Mar 11 03:47:45 [1618]: sending signal HUP to pid 816 Mar 11 03:47:45 [816]: received SIGHUP, rebinding Mar 11 03:47:45 [816]: eth0: executing: /usr/libexec/dhcpcd-run-hooks RECONFIGURE Mar 11 03:47:45 [816]: eth0: config file changed, expiring leases Mar 11 03:47:45 [816]: eth0: deleting IP address 10.224.1.100/24 Mar 11 03:47:45 [816]: eth0: deleting route to 10.224.1.0/24 Mar 11 03:47:45 [817]: eth0: BPF ARP 10.224.1.100 exited from PID 1131 Mar 11 03:47:45 [816]: eth0: deleting default route via 10.224.1.1 Mar 11 03:47:45 [816]: eth0: executing: /usr/libexec/dhcpcd-run-hooks EXPIRE Mar 11 03:47:45 [817]: ps_root_writeerror: result=0, data=(nil), len=0: Broken pipe Mar 11 03:47:45 [817]: ps_root_recvmsg: Broken pipe Mar 11 03:47:45 [816]: script_runreason: No such process Mar 11 03:47:45 [816]: eth0: IAID cb:00:76:b3 Mar 11 03:47:45 [816]: eth0: delaying IPv6 router solicitation for 0.1 seconds

Sateesh-Patil avatar Mar 11 '25 06:03 Sateesh-Patil

Please try a more recent dhcpcd like say 10.2.4 which has seen more seccomp work.

rsmarples avatar Jun 27 '25 06:06 rsmarples