https://bugzilla.novell.com/show_bug.cgi?id=731719 https://bugzilla.novell.com/show_bug.cgi?id=731719#c0 Summary: Socket-activated services with TCPWrapName cause segfault Classification: openSUSE Product: openSUSE 12.1 Version: Final Platform: x86-64 OS/Version: SuSE Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: conrad-novell.com@quisquis.de QAContact: qa@suse.de Found By: --- Blocker: --- Created an attachment (id=463156) --> (http://bugzilla.novell.com/attachment.cgi?id=463156) Example socket unit User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/535.8 (KHTML, like Gecko) Chrome/17.0.922.0 Safari/535.8 SUSE/17.0.922.0 When a socket-activated service has a TCPWrapName configured and access is denied via /etc/hosts.{allow,deny}, a systemd child segfaults. Log excerpt: Nov 21 13:34:04 rowling kernel: [15126.302549] sd(EXEC)[15030]: segfault at 7fff25f88fa8 ip 00007fb93d0cb885 sp 00007fff25f88fb0 error 6 in libc-2.14.1.so[7fb93d087000+185000] Nov 21 13:34:04 rowling systemd[1]: time@::1:13-::1:51570.service: main process exited, code=killed, status=11 Nov 21 13:34:04 rowling systemd[1]: Unit time@::1:13-::1:51570.service entered failed state. ---Example time.socket--- [Unit] Description=Provides socket for daytime service [Socket] ListenStream=13 Accept=true ---/Example--- ---Example time@.service--- [Unit] Description=Provides daytime service via time.socket [Service] ExecStart=/bin/date StandardInput=null StandardOutput=socket StandardError=syslog TCPWrapName=daytime ---/Example--- Reproducible: Always Steps to Reproduce: 1. Copy above example files to /etc/systemd/system 2. systemctl start time.socket 3. Make sure /etc/hosts.deny denies access to daytime 4. netcat localhost 13 5. Make sure /etc/hosts.* allows access to daytime, or remove TCPWrapName from service 6. netcat localhost 13 Mo 21. Nov 12:56:33 CET 2011 Actual Results: /var/log/messages contains segfault message Apparently, openSUSE doesn't ship any socket-activated services using TCPWrapName. At least I haven't found any on my system. And it seems that the segfault only occurs when the service would have been denied, anyway. That's why I chose severity "Normal", not "Major". -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.