Date: Thu, 18 Jul 2013 13:00:24 GMT From: Vincent Hoffman <vince@unsane.co.uk> To: freebsd-gnats-submit@FreeBSD.org Subject: ports/180634: security/ipsec-tools: ipsec-tools doesnt create control socket on 10-CURRENT Message-ID: <201307181300.r6ID0OqV026208@oldred.freebsd.org> Resent-Message-ID: <201307181310.r6IDA1NQ063477@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 180634
>Category: ports
>Synopsis: security/ipsec-tools: ipsec-tools doesnt create control socket on 10-CURRENT
>Confidential: no
>Severity: non-critical
>Priority: low
>Responsible: freebsd-ports-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: sw-bug
>Submitter-Id: current-users
>Arrival-Date: Thu Jul 18 13:10:01 UTC 2013
>Closed-Date:
>Last-Modified:
>Originator: Vincent Hoffman
>Release: 10.0-CURRENT #8 r253428:
>Organization:
>Environment:
FreeBSD fbsd.bmk.censored.net 10.0-CURRENT FreeBSD 10.0-CURRENT #8 r253428: Wed Jul 17 17:40:22 BST 2013 toor@fbsd.bmk.censored.net:/usr/obj/usr/src/sys/unsane-vm amd64
>Description:
Racoon fails to create its control socket /var/db/racoon/racoon.sock on 10-current
Tested on 2 10-current systems
on an 8.4 system truss shows
socket(PF_LOCAL,SOCK_STREAM,0) = 5 (0x5)
fcntl(5,F_SETFD,FD_CLOEXEC) = 0 (0x0)
unlink("/var/db/racoon/racoon.sock") ERR#2 'No such file or directory'
bind(5,{ AF_UNIX "/var/db/racoon/racoon.sock" },106) = 0 (0x0)
chown("/var/db/racoon/racoon.sock",0,0) = 0 (0x0)
chmod("/var/db/racoon/racoon.sock",0600) = 0 (0x0)
listen(0x5,0x5,0x0,0x2,0x12f402,0x9008) = 0 (0x0)
While on -CURRENT
madvise(0x802085000,0x5000,0x5,0xaaaaaaaaaaaaaaab,0x7fffffffb8f0,0x8018a8560) = 0 (0x0)
madvise(0x80208c000,0xc000,0x5,0xaaaaaaaaaaaaaaab,0x7fffffffb8f0,0x8018a8560) = 0 (0x0)
---
so trying to run "racoonctl show-sa ipsec" gives
[root@fbsd ~]# racoonctl show-sa ipsec
send: Bad file descriptor
>How-To-Repeat:
configure and run racoon on 10-CURRENT, try and use the control socket, eg. use racoonctl
>Fix:
>Release-Note:
>Audit-Trail:
>Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201307181300.r6ID0OqV026208>