Bug 827736

Summary:	>=net-misc/lldpd[seccomp]-1.0.10-r1 missing seccomp rules
Product:	Gentoo Linux	Reporter:	Ogelpre <gentoo.org>
Component:	Current packages	Assignee:	Patrick McLean <chutzpah>
Status:	RESOLVED FIXED
Severity:	normal	CC:	sam
Priority:	Normal	Keywords:	PATCH
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:
Bug Blocks:	768369

Description Ogelpre 2021-11-28 19:17:43 UTC

All >=net-misc/lldpd[seccomp]-1.10-r1 with glibc-2.33 on kernel version 5.14  are not starting because of a missing seccomp rule for pread64.

We have already patch lldpd-1.0.10-glibc-2.33.patch  which adds newfstatat to the allow list for seccomp. pread64 should be add, too.

I brought this and the new rule for pread64 upstream:
https://github.com/lldpd/lldpd/issues/488

The patch is already accepted for lldpd 1.0.14.

Adding the missing line to the already existing patch file should fix issues on Gentoo until lldpd 1.0.14 is released.


Reproducible: Always

Comment 1 Larry the Git Cow gentoo-dev

2021-11-29 01:13:42 UTC

The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=79ba1186abb5ae1702dc3233be4dc94113ae2830

commit 79ba1186abb5ae1702dc3233be4dc94113ae2830
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2021-11-29 01:12:51 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2021-11-29 01:12:51 +0000

    net-misc/lldpd: fix runtime (seccomp filter) with glibc-2.33
    
    Our patch already had newfstatat but we need to add pread64 too
    (now done upstream).
    
    Closes: https://bugs.gentoo.org/827736
    Signed-off-by: Sam James <sam@gentoo.org>

 net-misc/lldpd/files/lldpd-1.0.13-glibc-2.33.patch    | 19 +++++++++++++++++++
 .../{lldpd-1.0.12.ebuild => lldpd-1.0.12-r1.ebuild}   |  2 +-
 .../{lldpd-1.0.13.ebuild => lldpd-1.0.13-r1.ebuild}   |  4 ++--
 3 files changed, 22 insertions(+), 3 deletions(-)