[Bug 3702] sshd fork crashed when compiled with seccomp

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Mon Jun 24 10:28:14 AEST 2024


https://bugzilla.mindrot.org/show_bug.cgi?id=3702

--- Comment #9 from Darren Tucker <dtucker at dtucker.net> ---
(In reply to Nikola from comment #8)
> I have realized that the problem lies within my shallow
> understanding and I am in deep waters here.
> 
> When installing 64bit Raspbian I never knew that only the kernel is
> 64bit, whereas all the binaries, including the compiler are actually
> 32bit ARM.

That's.. unfortunate.  What does ./config.guess and gcc -dumpmachine
report?

[...]
> Trying to run ./configure --host=arm reports that seccomp is not
> supported.

You need to provide a full "triplet", or at least enough of one to
match the case statement, eg:

$ ./config.guess 
aarch64-unknown-linux-gnu

$ ./configure --host=arm-linux-gnueabihf | grep AUDIT_ARCH
checking for seccomp architecture... "AUDIT_ARCH_ARM"

> I was able to fool it by hard coding it, but that's probably
> considered a crime and I'm not aware if there's another way to
> override it:

The other alternative is you could explicitly disable the sandbox
(--without-sandbox) or specify the fallback rlimit sandbox
(--with-sandbox=rlimit).

> It also works well when I boot the 32bit kernel and then compile,
> which is something I did not figure out initially.

Maybe we could add a check to make sure sizeof(long)==8 as a sanity
check, either in configure or at runtime.

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list