Subject: systrace problems
To: None <current-users@netbsd.org>
From: Jeff <jeff@delnoch.net>
List: current-users
Date: 12/22/2005 13:03:17
Hello,

I recently upgraded a number of systems from ~3.99.5 to 3.99.14, one
of the side effects was that my systrace policies no longer worked.

I am getting errors such as:

systrace: deny user: ntpd, prog: /usr/sbin/ntpd, pid: 442(0)[791], 
policy: /usr/sbin/ntpd, filters: 98, syscall: netbsd-fswrite(5), 
filename: /<non-existent filename>: /var/db/ntp.drift.TEMP


my policy permits fswrite of the aforementioned file, however to be
certain I tried:

> systrace -A touch bah
touch: bah: Permission denied

ktrace shows
  9742 touch    CALL  __stat30(0xbfbfe976,0xbfbfe7a4)
  9742 touch    NAMI  "bah"
  9742 touch    RET   __stat30 -1 errno 2 No such file or directory
  9742 touch    CALL  open(0xbfbfe976,0x201,0x1b6)
  9742 touch    NAMI  "/<non-existent filename>: bah"
		      ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^		
this seems clearly wrong 

Unfortunately I cannot point to the exact change(s) that caused this,
but I am willing to provide any information/run tests as needed.

This is also filed as PR bin/32360

Thanks,
Jeff