Bug#879826: seccomp: missing sysinfo call

[Bernhard Schmidt <berni@debian.org>]

Hi,

> I don't think you can get it that way, it's one of the subprocesses
> started. You could let it dump core (ulimit -c unlimited) and then
> run gdb core /usr/lib/apt/methods/http I guess. I always just use
> systemd-coredump which collects all cores automatically and then
> all I have to do is run coredumpctl gdb, but I don't know if it
> works in a chroot.

Didn't work, and no matter what I do I can't get it to dump core in the
schroot. Not sure what it is doing here.

The last lines in strace are

[pid xxx] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0,
msg_iov=[{iov_base="\303P\1\0\0\1\0\0\0\0\0\0\6debian\6mirror\3lrz\2d"...,
iov_len=
38}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, msg_len=38},
{msg_hdr={msg_name=NULL, msg_namelen=0,
msg_iov=[{iov_base="|\203\1\0\0\1\0\0\0\0
\0\0\6debian\6mirror\3lrz\2d"..., iov_len=38}], msg_iovlen=1,
msg_controllen=0, msg_flags=0}, msg_len=38}], 2, MSG_NOSIGNAL) = 2
[pid xxx] poll([{fd=3, events=POLLIN}], 1, 5000) = 1 ([{fd=3,
revents=POLLIN}])
[pid xxx] ioctl(3, FIONREAD, [92])    = 0
[pid xxx] recvfrom(3,
"\303P\201\200\0\1\0\3\0\0\0\0\6debian\6mirror\3lrz\2d"..., 2048, 0,
{sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_a
ddr("127.0.0.1")}, [28->16]) = 92
[pid xxx] poll([{fd=3, events=POLLIN}], 1, 4999) = 1 ([{fd=3,
revents=POLLIN}])
[pid xxx] ioctl(3, FIONREAD, [104])   = 0
[pid xxx] recvfrom(3,
"|\203\201\200\0\1\0\3\0\0\0\0\6debian\6mirror\3lrz\2d"..., 65536, 0,
{sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_
addr("127.0.0.1")}, [28->16]) = 104
[pid xxx] close(3)                    = 0
[pid xxx] open("/etc/gai.conf", O_RDONLY|O_CLOEXEC) = 3
[pid xxx] fstat(3, {st_mode=S_IFREG|0644, st_size=2584, ...}) = 0
[pid xxx] fstat(3, {st_mode=S_IFREG|0644, st_size=2584, ...}) = 0
[pid xxx] read(3, "# Configuration for getaddrinfo("..., 4096) = 2584
[pid xxx] read(3, "", 4096)           = 0
[pid xxx] close(3)                    = 0
[pid xxx] futex(0x7f5ab1155ee4, FUTEX_WAKE_PRIVATE, 2147483647) = 0
[pid xxx] sysinfo({uptime=140721265854776, loads=[94822579290272,
140027492413408, 140027491396674], totalram=0, freeram=94822579312416,
sharedram
=140027492413408, bufferram=140027491836866, totalswap=140721265854800,
freeswap=140721265855384, procs=19056, totalhigh=0, freehigh=0, mem_unit=9
57369216}) = 99
[pid xxx] --- SIGSYS {si_signo=SIGSYS, si_code=SYS_SECCOMP,
si_call_addr=0x7f5ab0ea53e7, si_syscall=__NR_sysinfo,
si_arch=AUDIT_ARCH_X86_64} ---
[pid xxx] write(2, "\n **** Seccomp prevented executi"..., 46
 **** Seccomp prevented execution of syscall ) = 46
[pid xxx] write(2, "0000000099", 100000000099)  = 10
[pid xxx] write(2, " on architecture ", 17 on architecture ) = 17
[pid xxx] write(2, "amd64", 5amd64)        = 5
[pid xxx] write(2, " ****\n", 6 ****
)      = 6
[pid xxx] exit_group(31)

Bernhard