[Buildroot] sshd: fails with seccomp issue on arm

[Buildroot] sshd: fails with seccomp issue on arm

[Christian Stewart via buildroot]

Hi all,

Running sshd on an odroid xu4 (armv7) w/ Buildroot 2022.02:

connections fail with seccomp errors:

SECCOMP auid=4294967295 uid=103 gid=105 ses=4294967295 pid=1041
comm="sshd" exe="/usr/sbin/sshd" sig=31 arch=40000028 syscall=414
compat=0 ip=0xb6bf41b0 code=0x0

I found this relevant issue & patch added to gentoo to fix this:

https://www.mail-archive.com/debian-bugs-dist@lists.debian.org/msg1844602.html

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=9cbbc55aee6b2534bbc8d8fe12128c1083ee6850

Shall we include this patch in Buildroot as well?

https://github.com/gentoo/gentoo/blob/9cbbc55/net-misc/openssh/files/openssh-8.9_p1-allow-ppoll_time64.patch

I also ran into a build error with fzero-call-regs, there is a patch
to fix that too:

https://github.com/gentoo/gentoo/blob/9cbbc55/net-misc/openssh/files/openssh-8.9_p1-fzero-call-used-regs.patch

Thanks & best,
Christian Stewart
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] sshd: fails with seccomp issue on arm

[Arnout Vandecappelle]

On 12/03/2022 05:55, Christian Stewart via buildroot wrote:
> Hi all,
> 
> Running sshd on an odroid xu4 (armv7) w/ Buildroot 2022.02:
> 
> connections fail with seccomp errors:
> 
> SECCOMP auid=4294967295 uid=103 gid=105 ses=4294967295 pid=1041
> comm="sshd" exe="/usr/sbin/sshd" sig=31 arch=40000028 syscall=414
> compat=0 ip=0xb6bf41b0 code=0x0
> 
> I found this relevant issue & patch added to gentoo to fix this:
> 
> https://www.mail-archive.com/debian-bugs-dist@lists.debian.org/msg1844602.html
> 
> https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=9cbbc55aee6b2534bbc8d8fe12128c1083ee6850
> 
> Shall we include this patch in Buildroot as well?

  You mean [1] ?

> 
> https://github.com/gentoo/gentoo/blob/9cbbc55/net-misc/openssh/files/openssh-8.9_p1-allow-ppoll_time64.patch
> 
> I also ran into a build error with fzero-call-regs, there is a patch
> to fix that too:
> 
> https://github.com/gentoo/gentoo/blob/9cbbc55/net-misc/openssh/files/openssh-8.9_p1-fzero-call-used-regs.patch

  As in [2] ?

  Regards,
  Arnout

[1] 
https://git.buildroot.net/buildroot/commit/?id=10c1d887d6082d8806b38b86097c212c4c3ec8f9
[2] 
https://patchwork.ozlabs.org/project/buildroot/patch/20220311065511.14015-1-ps.report@gmx.net/


_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] sshd: fails with seccomp issue on arm

[Christian Stewart via buildroot]

hi Arnout,

On Sat, Mar 12, 2022 at 8:07 AM Arnout Vandecappelle <arnout@mind.be> wrote:
> On 12/03/2022 05:55, Christian Stewart via buildroot wrote:
> > I found this relevant issue & patch added to gentoo to fix this:
> >
> > https://www.mail-archive.com/debian-bugs-dist@lists.debian.org/msg1844602.html
> >
> > https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=9cbbc55aee6b2534bbc8d8fe12128c1083ee6850
> >
> > Shall we include this patch in Buildroot as well?
>
>   You mean [1] ?

This is currently the most recent commit on master, and was not
applied yet when I sent the email :)

> > I also ran into a build error with fzero-call-regs, there is a patch
> > to fix that too:
> >
> > https://github.com/gentoo/gentoo/blob/9cbbc55/net-misc/openssh/files/openssh-8.9_p1-fzero-call-used-regs.patch
>
>   As in [2]

Similarly this was applied very recently to master, I was using
2022.02 when sending this note.

So, yes, this is fixed now with those things merged.

Thanks,
Christian
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot