Ticket #21 (closed enhancement: fixed)

Opened 3 years ago

Last modified 3 years ago

start-stop-daemon should not use /dev/mem and /dev/kmem (jail and grsec support)

Reported by: Luca Barbato <lu_zero@gentoo.org> Owned by: roy
Priority: trivial Milestone:
Component: rc Version:
Keywords: Cc:

Description

rc_find_pids in src/librc/librc-daemon.c seems the main issue.

Change History

comment:82 Changed 3 years ago by roy

Does the ps command work within the jail? I ask, as looking at its source code, it uses the kvm library which what start-stop-daemon uses.

comment:84 Changed 3 years ago by Luca Barbato <lu_zero@gentoo.org>

ps works as should.

comment:85 Changed 3 years ago by roy

  • Status changed from new to assigned

I've just committed a change to match the default kvm_getfiles command with the ps one from source, and added an extra debug line. Could you re-test and see if it works now, or post the exact error text if it fails?

Thanks

comment:86 Changed 3 years ago by roy

Helps if I push the patch :)

comment:87 Changed 3 years ago by Luca Barbato <lu_zero@gentoo.org>

  • Status changed from assigned to resolved
  • Resolution set to fixed

The issue seems fixed now.

Note: See TracTickets for help on using tickets.