Description of problem: arpwatch dumps core at startup, trace shows in alarm() Version-Release number of selected component (if applicable): arpwatch-3.1-27.fc35.x86_64 How reproducible: dnf install arpwatch systemctl start arpwatch Steps to Reproduce: 1. systemctl start arpwatch 2. ps -ef|grep arpwatch 3. note lots of coredumps being dropped Actual results: Not running, lotsa cores Expected results: Running, no cores Additional info: If I run it manually via /usr/sbin/arpwatch -u arpwatch -F -C it runs ok. Just doesn't work via systemd. # coredumpctl list TIME PID UID GID SIG COREFILE EXE SIZE Mon 2021-11-15 01:08:51 UTC 134234 77 77 SIGSYS present /usr/sbin/arpwatch 389.6K Mon 2021-11-15 01:08:52 UTC 134257 77 77 SIGSYS present /usr/sbin/arpwatch 389.3K Mon 2021-11-15 01:08:53 UTC 134269 77 77 SIGSYS present /usr/sbin/arpwatch 389.1K Mon 2021-11-15 01:08:53 UTC 134281 77 77 SIGSYS present /usr/sbin/arpwatch 389.9K Mon 2021-11-15 01:08:54 UTC 134296 77 77 SIGSYS present /usr/sbin/arpwatch 389.7K # coredumpctl debug PID: 134296 (arpwatch) UID: 77 (arpwatch) GID: 77 (arpwatch) Signal: 31 (SYS) Timestamp: Mon 2021-11-15 01:08:53 UTC (56s ago) Command Line: /usr/sbin/arpwatch -u arpwatch -F -C Executable: /usr/sbin/arpwatch Control Group: /system.slice/arpwatch.service Unit: arpwatch.service Slice: system.slice Boot ID: fd84c3c85374416581cd70c1beab31ca Machine ID: b8395fc6a253440fb6781ad503e208cf Hostname: HIDDEN Storage: /var/lib/systemd/coredump/core.arpwatch.77.fd84c3c85374416581cd70c1beab31ca.134296.1636938533000000.zst (present) Disk Size: 389.7K Message: Process 134296 (arpwatch) of user 77 dumped core. Found module linux-vdso.so.1 with build-id: dae3359b1a59ec126730bb37a2eb0a5297895610 Found module libnl-3.so.200 with build-id: 9ec8cd67a8293913423a6e854ed3c21bb97ecf9e Found module libnl-route-3.so.200 with build-id: 25ac144713fd4d7ed0d9394a7d36c424b185fdf1 Found module ld-linux-x86-64.so.2 with build-id: da6dc8cd9ecc65cbd54815426326bae9614f727c Found module libibverbs.so.1 with build-id: a54f51bbbab1f47243e2ad7bc5fb854aaade4e2a Found module libc.so.6 with build-id: 148792ddec60e0b15e20655fdc10c35a5c394413 Found module libpcap.so.1 with build-id: d2259e63bc0fc951f7cc4d07c02d3b01a16ff76b Found module libresolv.so.2 with build-id: 22c0c0eb634a1a2e96f392587a07de92525686ff Found module arpwatch with build-id: 5396aa42cb39986af184d2806bf431ee38183de0 Stack trace of thread 134296: #0 0x00007f84eb634e8b alarm (libc.so.6 + 0xdce8b) #1 0x0000555e99dcc6de n/a (arpwatch + 0x36de) #2 0x00007f84eb585560 __libc_start_call_main (libc.so.6 + 0x2d560) #3 0x00007f84eb58560c __libc_start_main@@GLIBC_2.34 (libc.so.6 + 0x2d60c) #4 0x0000555e99dcc7f5 n/a (arpwatch + 0x37f5) GNU gdb (GDB) Fedora 11.1-2.fc35 Copyright (C) 2021 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-redhat-linux-gnu". Type "show configuration" for configuration details. For bug reporting instructions, please see: <https://www.gnu.org/software/gdb/bugs/>. Find the GDB manual and other documentation resources online at: <http://www.gnu.org/software/gdb/documentation/>. For help, type "help". Type "apropos word" to search for commands related to "word"... Reading symbols from /usr/sbin/arpwatch... Downloading 0.03 MB separate debug info for /usr/sbin/arpwatch Reading symbols from /home/iand/.cache/debuginfod_client/5396aa42cb39986af184d2806bf431ee38183de0/debuginfo... Downloading 0.01 MB separate debug info for /home/iand/.cache/debuginfod_client/5396aa42cb39986af184d2806bf431ee38183de0/debuginfo warning: Can't open file socket:[6384050] which was expanded to socket:[6384050] during file-backed mapping note processing [New LWP 134296] Downloading -0.00 MB separate debug info for /lib64/libresolv.so.2 Downloading -0.00 MB separate debug info for /home/iand/.cache/debuginfod_client/22c0c0eb634a1a2e96f392587a07de92525686ff/debuginfo Downloading -0.00 MB separate debug info for /lib64/libpcap.so.1 Downloading -0.00 MB separate debug info for /lib64/libc.so.6 Downloading -0.00 MB separate debug info for /lib64/libibverbs.so.1 Downloading -0.00 MB separate debug info for /home/iand/.cache/debuginfod_client/a54f51bbbab1f47243e2ad7bc5fb854aaade4e2a/debuginfo Downloading -0.00 MB separate debug info for /lib64/libnl-route-3.so.200 Downloading -0.00 MB separate debug info for /home/iand/.cache/debuginfod_client/25ac144713fd4d7ed0d9394a7d36c424b185fdf1/debuginfo Downloading -0.00 MB separate debug info for /lib64/libnl-3.so.200 Downloading 0.01 MB separate debug info for /var/lib/arpwatch/system-supplied DSO at 0x7ffecc1db000 [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib64/libthread_db.so.1". Core was generated by `/usr/sbin/arpwatch -u arpwatch -F -C'. Program terminated with signal SIGSYS, Bad system call. #0 0x00007f84eb634e8b in alarm () at ../sysdeps/unix/syscall-template.S:120 Downloading -0.00 MB source file /usr/src/debug/glibc-2.34-8.fc35.x86_64/posix/../sysdeps/unix/syscall-template.S 120 T_PSEUDO (SYSCALL_SYMBOL, SYSCALL_NAME, SYSCALL_NARGS) (gdb) where #0 0x00007f84eb634e8b in alarm () at ../sysdeps/unix/syscall-template.S:120 #1 0x0000555e99dcc6de in main (argc=<optimized out>, argv=<optimized out>) at ./arpwatch.c:469 (gdb)
Thanks for the report. I wonder when this stopped working—I could have sworn it was working correctly in the past. Anyway, the problem is that arpwatch is calling alarm(2), which is excluded as part of the @timer group in the syscall filtering that is part of the sandboxing options in the systemd unit files. I can reproduce the problem, and I’ll prepare an update to fix it right away.
FEDORA-2021-c7a8e01903 has been submitted as an update to Fedora 36. https://bodhi.fedoraproject.org/updates/FEDORA-2021-c7a8e01903
FEDORA-2021-c7a8e01903 has been pushed to the Fedora 36 stable repository. If problem still persists, please make note of it in this bug report.
FEDORA-2021-43fc222e89 has been submitted as an update to Fedora 35. https://bodhi.fedoraproject.org/updates/FEDORA-2021-43fc222e89
FEDORA-2021-a7378c8c5e has been submitted as an update to Fedora 34. https://bodhi.fedoraproject.org/updates/FEDORA-2021-a7378c8c5e
FEDORA-2021-a7378c8c5e has been pushed to the Fedora 34 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2021-a7378c8c5e` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2021-a7378c8c5e See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-2021-43fc222e89 has been pushed to the Fedora 35 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2021-43fc222e89` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2021-43fc222e89 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-2021-a7378c8c5e has been pushed to the Fedora 34 stable repository. If problem still persists, please make note of it in this bug report.
FEDORA-2021-43fc222e89 has been pushed to the Fedora 35 stable repository. If problem still persists, please make note of it in this bug report.