Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 827736 - >=net-misc/lldpd[seccomp]-1.0.10-r1 missing seccomp rules
Summary: >=net-misc/lldpd[seccomp]-1.0.10-r1 missing seccomp rules
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Patrick McLean
URL:
Whiteboard:
Keywords: PATCH
Depends on:
Blocks: glibc-2.33
  Show dependency tree
 
Reported: 2021-11-28 19:17 UTC by Ogelpre
Modified: 2021-11-29 01:13 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Ogelpre 2021-11-28 19:17:43 UTC
All >=net-misc/lldpd[seccomp]-1.10-r1 with glibc-2.33 on kernel version 5.14  are not starting because of a missing seccomp rule for pread64.

We have already patch lldpd-1.0.10-glibc-2.33.patch  which adds newfstatat to the allow list for seccomp. pread64 should be add, too.

I brought this and the new rule for pread64 upstream:
https://github.com/lldpd/lldpd/issues/488

The patch is already accepted for lldpd 1.0.14.

Adding the missing line to the already existing patch file should fix issues on Gentoo until lldpd 1.0.14 is released.


Reproducible: Always
Comment 1 Larry the Git Cow gentoo-dev 2021-11-29 01:13:42 UTC
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=79ba1186abb5ae1702dc3233be4dc94113ae2830

commit 79ba1186abb5ae1702dc3233be4dc94113ae2830
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2021-11-29 01:12:51 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2021-11-29 01:12:51 +0000

    net-misc/lldpd: fix runtime (seccomp filter) with glibc-2.33
    
    Our patch already had newfstatat but we need to add pread64 too
    (now done upstream).
    
    Closes: https://bugs.gentoo.org/827736
    Signed-off-by: Sam James <sam@gentoo.org>

 net-misc/lldpd/files/lldpd-1.0.13-glibc-2.33.patch    | 19 +++++++++++++++++++
 .../{lldpd-1.0.12.ebuild => lldpd-1.0.12-r1.ebuild}   |  2 +-
 .../{lldpd-1.0.13.ebuild => lldpd-1.0.13-r1.ebuild}   |  4 ++--
 3 files changed, 22 insertions(+), 3 deletions(-)