search

YunoHost-Apps / seafile_ynh

Seafile package for YunoHost
https://seafile.com
MIT License
14 stars 19 forks source link

Journalctl full of audit: SECCOMP syscall=105 on python with the seafile user #95

Closed HugoPoi closed 1 year ago

HugoPoi commented 1 year ago

Maybe a issue with Seafile itself, upstream issue ? Or config about the service This is weird. The network is low so no deny of service and the logs on nginx are pretty calm regarding seafile, so not sure about is going on here.

Logs

oct. 24 00:48:51 home.hugopoi.net audit[811024]: SECCOMP auid=4294967295 uid=993 gid=993 ses=4294967295 subj==unconfined pid=811024 comm="python3" exe="/usr/bin/python3.9" sig=31 arch=c000003e syscall=105 compat=0 ip=0x7f58148a5782 code=0x80000000
oct. 24 00:48:51 home.hugopoi.net audit[811025]: SECCOMP auid=4294967295 uid=993 gid=993 ses=4294967295 subj==unconfined pid=811025 comm="python3" exe="/usr/bin/python3.9" sig=31 arch=c000003e syscall=105 compat=0 ip=0x7f58148a5782 code=0x80000000
oct. 24 00:48:51 home.hugopoi.net audit[811026]: SECCOMP auid=4294967295 uid=993 gid=993 ses=4294967295 subj==unconfined pid=811026 comm="python3" exe="/usr/bin/python3.9" sig=31 arch=c000003e syscall=105 compat=0 ip=0x7f58148a5782 code=0x80000000
oct. 24 00:48:51 home.hugopoi.net audit[811027]: SECCOMP auid=4294967295 uid=993 gid=993 ses=4294967295 subj==unconfined pid=811027 comm="python3" exe="/usr/bin/python3.9" sig=31 arch=c000003e syscall=105 compat=0 ip=0x7f58148a5782 code=0x80000000
oct. 24 00:48:51 home.hugopoi.net audit[811028]: SECCOMP auid=4294967295 uid=993 gid=993 ses=4294967295 subj==unconfined pid=811028 comm="python3" exe="/usr/bin/python3.9" sig=31 arch=c000003e syscall=105 compat=0 ip=0x7f58148a5782 code=0x80000000
oct. 24 00:48:51 home.hugopoi.net audit[811029]: SECCOMP auid=4294967295 uid=993 gid=993 ses=4294967295 subj==unconfined pid=811029 comm="python3" exe="/usr/bin/python3.9" sig=31 arch=c000003e syscall=105 compat=0 ip=0x7f58148a5782 code=0x80000000
oct. 24 00:48:51 home.hugopoi.net audit[811030]: SECCOMP auid=4294967295 uid=993 gid=993 ses=4294967295 subj==unconfined pid=811030 comm="python3" exe="/usr/bin/python3.9" sig=31 arch=c000003e syscall=105 compat=0 ip=0x7f58148a5782 code=0x80000000
oct. 24 00:48:51 home.hugopoi.net audit[811031]: SECCOMP auid=4294967295 uid=993 gid=993 ses=4294967295 subj==unconfined pid=811031 comm="python3" exe="/usr/bin/python3.9" sig=31 arch=c000003e syscall=105 compat=0 ip=0x7f58148a5782 code=0x80000000
oct. 24 00:48:51 home.hugopoi.net audit[811032]: SECCOMP auid=4294967295 uid=993 gid=993 ses=4294967295 subj==unconfined pid=811032 comm="python3" exe="/usr/bin/python3.9" sig=31 arch=c000003e syscall=105 compat=0 ip=0x7f58148a5782 code=0x80000000
oct. 24 00:48:51 home.hugopoi.net audit[811033]: SECCOMP auid=4294967295 uid=993 gid=993 ses=4294967295 subj==unconfined pid=811033 comm="python3" exe="/usr/bin/python3.9" sig=31 arch=c000003e syscall=105 compat=0 ip=0x7f58148a5782 code=0x80000000
oct. 24 00:48:51 home.hugopoi.net audit[811034]: SECCOMP auid=4294967295 uid=993 gid=993 ses=4294967295 subj==unconfined pid=811034 comm="python3" exe="/usr/bin/python3.9" sig=31 arch=c000003e syscall=105 compat=0 ip=0x7f58148a5782 code=0x80000000
oct. 24 00:48:51 home.hugopoi.net audit[811035]: SECCOMP auid=4294967295 uid=993 gid=993 ses=4294967295 subj==unconfined pid=811035 comm="python3" exe="/usr/bin/python3.9" sig=31 arch=c000003e syscall=105 compat=0 ip=0x7f58148a5782 code=0x80000000
oct. 24 00:48:51 home.hugopoi.net audit[811036]: SECCOMP auid=4294967295 uid=993 gid=993 ses=4294967295 subj==unconfined pid=811036 comm="python3" exe="/usr/bin/python3.9" sig=31 arch=c000003e syscall=105 compat=0 ip=0x7f58148a5782 code=0x80000000
oct. 24 00:48:51 home.hugopoi.net audit[811037]: SECCOMP auid=4294967295 uid=993 gid=993 ses=4294967295 subj==unconfined pid=811037 comm="python3" exe="/usr/bin/python3.9" sig=31 arch=c000003e syscall=105 compat=0 ip=0x7f58148a5782 code=0x80000000
oct. 24 00:48:51 home.hugopoi.net audit[811038]: SECCOMP auid=4294967295 uid=993 gid=993 ses=4294967295 subj==unconfined pid=811038 comm="python3" exe="/usr/bin/python3.9" sig=31 arch=c000003e syscall=105 compat=0 ip=0x7f58148a5782 code=0x80000000
oct. 24 00:48:52 home.hugopoi.net audit[811039]: SECCOMP auid=4294967295 uid=993 gid=993 ses=4294967295 subj==unconfined pid=811039 comm="python3" exe="/usr/bin/python3.9" sig=31 arch=c000003e syscall=105 compat=0 ip=0x7f58148a5782 code=0x80000000
oct. 24 00:48:52 home.hugopoi.net audit[811040]: SECCOMP auid=4294967295 uid=993 gid=993 ses=4294967295 subj==unconfined pid=811040 comm="python3" exe="/usr/bin/python3.9" sig=31 arch=c000003e syscall=105 compat=0 ip=0x7f58148a5782 code=0x80000000
oct. 24 00:48:52 home.hugopoi.net audit[811041]: SECCOMP auid=4294967295 uid=993 gid=993 ses=4294967295 subj==unconfined pid=811041 comm="python3" exe="/usr/bin/python3.9" sig=31 arch=c000003e syscall=105 compat=0 ip=0x7f58148a5782 code=0x80000000
oct. 24 00:48:52 home.hugopoi.net audit[811042]: SECCOMP auid=4294967295 uid=993 gid=993 ses=4294967295 subj==unconfined pid=811042 comm="python3" exe="/usr/bin/python3.9" sig=31 arch=c000003e syscall=105 compat=0 ip=0x7f58148a5782 code=0x80000000
Josue-T commented 1 year ago

A fix has been released about the systemd syscon filter can you try to update the app and check it ?

HugoPoi commented 1 year ago

Ok I see https://github.com/YunoHost-Apps/seafile_ynh/commit/93a7e8da3eccac5caf346f9654aed78937439855 The service file wasn't like this. I think it's fixed, I will re-open if I see some weird logs again. Ok this patch hasn't version number, need force update :-)