search for: pf_netlink

Hi, In kubevirt we are running into a strange permission problem on libvirt-5.0. We see transient "Permission Denied" errors when "virAuditSend" wants to send an audit log. [1] shows the logs of one of these containers. Here an example: {"component":"virt-launcher","level":"warning","msg":"Failed to send audit message

...96, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f46579c7000 read(3, "#\n# reserved values\n#\n0\tcosmos\n#"..., 4096) = 112 read(3, "", 4096) = 0 close(3) = 0 munmap(0x7f46579c7000, 4096) = 0 socket(PF_NETLINK, SOCK_RAW, 12) = -1 EPROTONOSUPPORT (Protocol not supported) write(2, "Memory allocation failure\n", 26Memory allocation failure ) = 26 --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=0} --- +++ killed by SIGSEGV (core dumped) +++ Segmentation fault (core dumped) Is th...

...ner. After a few denials libvirt can > just continue. The transient nature makes this really bizarre. The error message above comes from the audit_log_user_message() call that libvirt makes. This is implemented in libaudit.so using the sendto() syscall on a netlink socket opened with socket(PF_NETLINK, SOCK_RAW, NETLINK_AUDIT); So in terms of code being run there, there's very little - the EPERM is coming back from the kernel when sending the message. I'm not sure what scenario could cause this - perhaps the audit log buffer in the kernel is full or something like that ? > * Som...

Hey, I am getting an invalid argument trying to insert a qdisc: [root@emu-5 iproute2]# tc qdisc add dev eth0 root xcp capacity 50Mbit limit 500 RTNETLINK answers: Invalid argument I''m not sure whats wrong here, because i can successfully insert this qdisc on other computers of mine. How can i debug this? Thanks! George

...-> 6, base_addr:0xb7e98ae0, limit:1048575, seg_32bit:1, contents:0, read_exec_only:0, limit_in_pages:1, seg_not_present:0, useable:1}) = 0 munmap(0xb7fd8000, 17386) = 0 brk(0) = 0x804e000 brk(0x806f000) = 0x806f000 socket(PF_NETLINK, SOCK_RAW, 12) = 3 getsockname(3, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 0 time(NULL) = 1185884349 bind(3, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0 getsockname(3, {sa_family=AF_NETLINK, pid=1925, groups=00000000}, [12]) = 0 bind(3,...

Hi, I installed the shorewall 1.3.8-2 debian package to my debian testing machine which serves as the gateway to the internet. Since I have two other machine connect to internet thru this gateway machine, I also downloaded the configuration guide for "basic two-interface firewall" and followed the instructions. When I try to start the shorewall I get the following message and can not

when doing somehitng like ip rule add fwmark 3 nat 200.42.75.183 table ppp0 prio 1 (the idea is that packets that match the fwmark 3 change their source address to 200.42.75.183)..it first apply the nat and then routes to table ppp0 right? in such case the, nat, why may be nat not being applyed? cause it doesnt work at all..it goes to that interface but does not nat the src address of the package.

...= 0 23:56:00.391760 open("/usr/lib/sasl2/libldapdb.la", O_RDONLY) = 18 23:56:00.391817 close(18) = 0 23:56:00.391862 getdents(16, /* 0 entries */, 4096) = 0 23:56:00.391910 close(16) = 0 23:56:00.391992 geteuid32() = 0 23:56:00.392100 socket(PF_NETLINK, SOCK_RAW, 0) = 16 23:56:00.392155 bind(16, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0 23:56:00.392212 getsockname(16, {sa_family=AF_NETLINK, pid=16064, groups=00000000}, [12]) = 0 23:56:00.392294 time(NULL) = 1201560960 23:56:00.392345 sendto(16, "\24\0\0\0\26\0\1...

Hi, Rowland, and thanks for the reply. The PDC OS is Slackware 13. The BDC OS is Slackware 14. The choice to use Samba 4.0 was merely due to its inclusion on the Slackware 14 distro. I'll worry about upgrading that once I have the migration complete. I will post the two machine's respective smb.conf's later today. -- View this message in context:

as the next klibc release 1.5.16 looks like shaping up, I have a trouble to build that for Debian. currently I build depent on linux-libc-dev, I don't know what against I can build latest klibc, see klibc fails to build due too: make -C linux/ ARCH=x86_64 INSTALL_HDR_PATH=debian/tmp/usr/lib/klibc/ headers_install make[3]: *** No rule to make target `headers_install'. Stop. make[2]: ***

...= 0 connect(3, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0 time(NULL) = 1218454958 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=3519, ...}) = 0 send(3, "<30>Aug 11 07:42:38 rsyncd[18279"..., 88, MSG_NOSIGNAL) = 88 socket(PF_NETLINK, SOCK_RAW, 0) = 4 bind(4, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0 getsockname(4, {sa_family=AF_NETLINK, pid=18279, groups=00000000}, [12]) = 0 time(NULL) = 1218454958 sendto(4, "\24\0\0\0\26\0\1\3\256%\240H\0\0\0\0\0\0\0\0", 20, 0, {sa...

...ffc000 brk(0xb8024000) = 0xb8024000 brk(0xb8045000) = 0xb8045000 open("/usr/local/samba/lib/valid.dat", O_RDONLY|O_LARGEFILE) = 3 mmap2(NULL, 65536, PROT_READ, MAP_SHARED, 3, 0) = 0xb7a60000 close(3) = 0 socket(PF_NETLINK, SOCK_RAW, 0) = 3 bind(3, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0 getsockname(3, {sa_family=AF_NETLINK, pid=7687, groups=00000000}, [12]) = 0 time(NULL) = 1423709100 sendto(3, "\24\0\0\0\22\0\1\3\254\23\334T\0\0\0\0\0\0\0\0"..., 20, 0,...

...vents=POLLIN}], 1, 5000) = 1 ([{fd=3, revents=POLLIN}]) recvfrom(3, "\360~\205\200\0\1\0\1\0\1\0\1\t_kerberos\4_tcp\6FAMI"..., 2048, 0, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("192.168.178.222")}, [16]) = 132 close(3) = 0 socket(PF_NETLINK, SOCK_RAW, 0) = 3 bind(3, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0 getsockname(3, {sa_family=AF_NETLINK, pid=6210, groups=00000000}, [12]) = 0 gettimeofday({1420299769, 996499}, NULL) = 0 sendto(3, "\24\0\0\0\26\0\1\3\371\r\250T\0\0\0\0\0\0\0\0", 20, 0, {sa_family=A...

...>> recvfrom(3, >> "\360~\205\200\0\1\0\1\0\1\0\1\t_kerberos\4_tcp\6FAMI"..., 2048, 0, >> {sa_family=AF_INET, sin_port=htons(53), >> sin_addr=inet_addr("192.168.178.222")}, [16]) = 132 >> close(3) = 0 >> socket(PF_NETLINK, SOCK_RAW, 0) = 3 >> bind(3, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0 >> getsockname(3, {sa_family=AF_NETLINK, pid=6210, groups=00000000}, >> [12]) = 0 >> gettimeofday({1420299769, 996499}, NULL) = 0 >> sendto(3, "\24\0\0\0\26\0\1\3\371\r\2...

...= 0xb8024000 > brk(0xb8045000) = 0xb8045000 > open("/usr/local/samba/lib/valid.dat", O_RDONLY|O_LARGEFILE) = 3 > mmap2(NULL, 65536, PROT_READ, MAP_SHARED, 3, 0) = 0xb7a60000 > close(3) = 0 > socket(PF_NETLINK, SOCK_RAW, 0) = 3 > bind(3, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0 > getsockname(3, {sa_family=AF_NETLINK, pid=7687, groups=00000000}, [12]) = 0 > time(NULL) = 1423709100 > sendto(3, "\24\0\0\0\22\0\1\3\254\23\334T\0\0\0\0\0\0\0...

...quot;\360~\205\200\0\1\0\1\0\1\0\1\t_kerberos\4_tcp\6FAMI"..., 2048, 0, >>>> {sa_family=AF_INET, sin_port=htons(53), >>>> sin_addr=inet_addr("192.168.178.222")}, [16]) = 132 >>>> close(3) = 0 >>>> socket(PF_NETLINK, SOCK_RAW, 0) = 3 >>>> bind(3, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0 >>>> getsockname(3, {sa_family=AF_NETLINK, pid=6210, groups=00000000}, >>>> [12]) = 0 >>>> gettimeofday({1420299769, 996499}, NULL) = 0 >>>> se...

..., 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4310e06000 read(3, "# Configuration for getaddrinfo("..., 4096) = 2584 read(3, "", 4096) = 0 close(3) = 0 munmap(0x7f4310e06000, 4096) = 0 socket(PF_NETLINK, SOCK_RAW, 0) = 3 bind(3, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0 getsockname(3, {sa_family=AF_NETLINK, pid=30534, groups=00000000}, [12]) = 0 sendto(3, "\24\0\0\0\26\0\1\3\10-|R\0\0\0\0\0\0\0\0", 20, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20 recv...

...1 ([{fd=3, revents=POLLIN}]) > recvfrom(3, "\360~\205\200\0\1\0\1\0\1\0\1\t_kerberos\4_tcp\6FAMI"..., > 2048, 0, {sa_family=AF_INET, sin_port=htons(53), > sin_addr=inet_addr("192.168.178.222")}, [16]) = 132 > close(3) = 0 > socket(PF_NETLINK, SOCK_RAW, 0) = 3 > bind(3, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0 > getsockname(3, {sa_family=AF_NETLINK, pid=6210, groups=00000000}, > [12]) = 0 > gettimeofday({1420299769, 996499}, NULL) = 0 > sendto(3, "\24\0\0\0\26\0\1\3\371\r\250T\0\0\0\0\0\0\0\0&...

...>>> "\360~\205\200\0\1\0\1\0\1\0\1\t_kerberos\4_tcp\6FAMI"..., 2048, 0, >>> {sa_family=AF_INET, sin_port=htons(53), >>> sin_addr=inet_addr("192.168.178.222")}, [16]) = 132 >>> close(3) = 0 >>> socket(PF_NETLINK, SOCK_RAW, 0) = 3 >>> bind(3, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0 >>> getsockname(3, {sa_family=AF_NETLINK, pid=6210, groups=00000000}, >>> [12]) = 0 >>> gettimeofday({1420299769, 996499}, NULL) = 0 >>> sendto(3, "\24\0\...

...96, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96bfe43000 read(3, "nodev\tsysfs\nnodev\trootfs\nnodev\tb"..., 1024) = 310 read(3, "", 1024) = 0 close(3) = 0 munmap(0x7f96bfe43000, 4096) = 0 socket(PF_NETLINK, SOCK_RAW, 9) = 3 fcntl(3, F_SETFD, FD_CLOEXEC) = 0 open("/usr/lib/locale/locale-archive", O_RDONLY) = 4 fstat(4, {st_mode=S_IFREG|0644, st_size=99158576, ...}) = 0 mmap(NULL, 99158576, PROT_READ, MAP_PRIVATE, 4, 0) = 0x7f96b8fb5000 close(4)...