Opened 3 years ago

Closed 3 years ago

#23090 closed defect (fixed)

Sandbox failure on Debian 8.9 under OpenVZ with kernel version 2.6.32

Reported by: teor Owned by:
Priority: Medium Milestone: Tor: 0.3.2.x-final
Component: Core Tor/Tor Version: Tor:
Severity: Normal Keywords: sandbox, log, error-message, usability
Cc: Actual Points:
Parent ID: Points: 0.5
Reviewer: Sponsor:


A relay operator reports a sandbox failure on Tor with the following log lines:

sandbox_getaddrinfo(): (Sandbox) getaddrinfo succeeded.
sandbox_getaddrinfo(): (Sandbox) getaddrinfo failed.
sandbox_getaddrinfo(): (Sandbox) getaddrinfo succeeded.
install_syscall_filter(): Bug: (Sandbox) failed to load: -22 (Invalid argument)! (on Tor )
tor_main(): Bug: Failed to create syscall sandbox filter (on Tor )
main process exited, code=exited, status=1/FAILURE


Child Tickets

Change History (4)

comment:1 Changed 3 years ago by yawning

seccomp-bpf was added in Linux 3.5. Failure is to be expected.

comment:2 Changed 3 years ago by nickm

Yeah; we can't make the sandbox work when the kernel doesn't support it. But we should at least give a useful error message -- "-22 (Invalid argument)!" isn't going to help anybody.

comment:3 Changed 3 years ago by nickm

Keywords: sandbox log error-message usability added; crash removed

comment:4 Changed 3 years ago by nickm

Resolution: fixed
Status: newclosed

ab18e5e5fcff7fbdbf0905e6dd2585b7e4a10108 improves the warning.

Note: See TracTickets for help on using tickets.