Opened 3 months ago

Closed 6 weeks ago

#23090 closed defect (fixed)

Sandbox failure on Debian 8.9 under OpenVZ with kernel version 2.6.32

Reported by: teor Owned by:
Priority: Medium Milestone: Tor: 0.3.2.x-final
Component: Core Tor/Tor Version: Tor: 0.3.0.9
Severity: Normal Keywords: sandbox, log, error-message, usability
Cc: Actual Points:
Parent ID: Points: 0.5
Reviewer: Sponsor:

Description

A relay operator reports a sandbox failure on Tor 0.3.0.9 with the following log lines:

sandbox_getaddrinfo(): (Sandbox) getaddrinfo succeeded.
sandbox_getaddrinfo(): (Sandbox) getaddrinfo failed.
sandbox_getaddrinfo(): (Sandbox) getaddrinfo succeeded.
install_syscall_filter(): Bug: (Sandbox) failed to load: -22 (Invalid argument)! (on Tor 0.3.0.9 )
tor_main(): Bug: Failed to create syscall sandbox filter (on Tor 0.3.0.9 )
main process exited, code=exited, status=1/FAILURE

See https://lists.torproject.org/pipermail/tor-relays/2017-August/012694.html

Child Tickets

Change History (4)

comment:1 Changed 3 months ago by yawning

seccomp-bpf was added in Linux 3.5. Failure is to be expected.

comment:2 Changed 3 months ago by nickm

Yeah; we can't make the sandbox work when the kernel doesn't support it. But we should at least give a useful error message -- "-22 (Invalid argument)!" isn't going to help anybody.

comment:3 Changed 3 months ago by nickm

Keywords: sandbox log error-message usability added; crash removed

comment:4 Changed 6 weeks ago by nickm

Resolution: fixed
Status: newclosed

ab18e5e5fcff7fbdbf0905e6dd2585b7e4a10108 improves the warning.

Note: See TracTickets for help on using tickets.