Tuesday, December 03, 2019

Re: no pcap file from isakmpd in OBSD6.6

m_priv_local_sanitize_path() contains some realpath() checks.

I think this is either exposing realpath() abuse( as a result of the
new in-kernel realpath to support unveil better), or it is hitting the
realpath() bug which was fixed post-release?

Christoph Leser <christoph.leser@sup-logistik.de> wrote:

> Hi,
>
> after upgrading openbsd6.5 to oopenbsd6.6 using sysupgrade isakmpd does no longer write pcap files in /var/run.
>
> In /var/log/messages we see the following message:
>
> isakmpd[7385]: log_packet_init: fopen ("/var/run/isakmpd.pcap", "w") failed: Permission denied
>
> Any ideas?
>
> Mit freundlichen Grüßen / Best regards / Meilleures salutations
>
>
> Christoph Leser
> Systemtechnik
>
>
> S&P Computersysteme GmbH
> Systemhaus für Logistik
> Zettachring 4
> 70567Stuttgart
> www.sup-logistik.de
>
> T: +49 711 726 41-0
> F: +49 711 726 41-70
> christoph.leser@sup-logistik.de
>
>
>    
>
> Amtsgericht Stuttgart HRB 11921
> Geschäftsführer: Horst Reichert, Rémy El Abd
>
> Informationspflicht zur Datenverarbeitung:
> Kunden: Hier >> 
> Dienstleister / Lieferanten: Hier>>
>

No comments:

Post a Comment