systrace parse error

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

systrace parse error

Antonios Anastasiadis
hello.
I am running a chrooted apache with php and symon/syweb, all working
fine by this point.
Trying to run in in a systrace-constrained environment I stumble upon
this error :

# systrace -A /usr/sbin/httpd
# syntax error
Parse error.
systrace: Filter generation error: filename eq "/bin/sh" and argv eq
"sh -c /bin/rrdtool graph
/symon/cache/1157027400_f585107777cabcbe4d2a641ba7a6f07a '-v bits/s'
'-t if(ath0) of hub' '-w 300' '-h 225' '-s -86400' '-e -1'
'DEF:in=/symon/rrds/hub/if_ath0.rrd:ibytes:AVERAGE'
'DEF:out=/symon/rrds/hub/if_ath0.rrd:obytes:AVERAGE'
'DEF:inp=/symon/rrds/hub/if_ath0.rrd:ipackets:AVERAGE'
'DEF:outp=/symon/rrds/hub/if_ath0.rrd:opackets:AVERAGE'
'DEF:coll=/symon/rrds/hub/if_ath0.rrd:collisions:AVERAGE'
'CDEF:nodata=in,UN,0,*' 'CDEF:inb=in,8,*' 'CDEF:outb=out,8,*'
'CDEF:noutb=outb,-1,*' 'CDEF:pmax=inb,100,/,102,*'
'CDEF:nmax=noutb,100,/,102,*' 'CDEF:totp=inp,outp,+'
'CDEF:per=coll,totp,/,100,*' 'CDEF:p0=per,0,EQ,INF,0,IF'
'CDEF:p10=per,10,LE,INF,0,IF,per,1,GT,INF,0,IF,MIN'
'CDEF:p20=per,20,LE,INF,0,IF,per,10,GT,INF,0,IF,MIN'
'CDEF:p30=per,30,LE,INF,0,IF,per,20,GT,INF,0,IF,MIN'
'CDEF:p40=per,40,LE,INF,0,IF,per,30,GT,INF,0,IF,MIN'
'CDEF:p50=per,50,LE,INF,0,IF,per,40,GT,INF,0,IF,MIN'
'CDEF:p60=per,60,LE,INF,0,IF,per,50,GT,INF,0,IF,MIN'
'CDEF:p70=per,70,LE,INF,0,IF,per,60,GT,INF,0,IF,MIN'
'CDEF:p80=per,80,LE,INF,0,IF,per,70,GT,INF,0,IF,MIN'
'CDEF:p90=per,80,LE,INF,0,IF,per,80,GT,INF,0,IF,MIN'
'CDEF:p100=per,100,LE,INF,0,IF,per,90,GT,INF,0,IF,MIN'
'CDEF:n0=p0,-1,*' 'CDEF:n10=p10,-1,*' 'CDEF:n20=p20,-1,*'
'CDEF:n30=p30,-1,*' 'CDEF:n40=p40,-1,*' 'CDEF:n50=p50,-1,*'
'CDEF:n60=p60,-1,*' 'CDEF:n70=p70,-1,*' 'CDEF:n80=p80,-1,*'
'CDEF:n90=p90,-1,*' 'CDEF:n100=p100,-1,*' 'LINE1:pmax' 'LINE1:nmax'
'COMMENT:           min          avg          max          last\\n'
'LINE1:nodata#FF0000' 'AREA:inb#00FF00:in ' 'GPRINT:inb:MIN: %6.2lf
%sbps' 'GPRINT:inb:AVERAGE:%6.2lf %sbps' 'GPRINT:inb:MAX:%6.2lf %sbps'
'GPRINT:inb:LAST:%6.2lf %sbps\\n' 'STACK:p0#FAFFFA' 'STACK:p10#FFFFE6'
'STACK:p20#FFD900' 'STACK:p30#FD6724' 'STACK:p40#E61800'
'STACK:p50#AB2934' 'STACK:p60#B2888B' 'STACK:p70#CC91BA'
'STACK:p80#6A2990' 'STACK:p90#0571B0' 'STACK:p100#000000'
'AREA:noutb#00FFFF:out ' 'GPRINT:outb:MIN:%6.2lf %sbps'
'GPRINT:outb:AVERAGE:%6.2lf %sbps' 'GPRINT:outb:MAX:%6.2lf %sbps'
'GPRINT:outb:

which happens when I try to browse through the symon statistics page.
systrace/httpd terminates, so I cannot have a fully working auto-made
systrace policy.
Is that a bug?

dmesg following

OpenBSD 4.0-beta (GENERIC) #1039: Wed Aug  2 12:10:09 MDT 2006
    [hidden email]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel Pentium III ("GenuineIntel" 686-class) 799 MHz
cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE
real mem  = 267993088 (261712K)
avail mem = 236920832 (231368K)
using 3297 buffers containing 13504512 bytes (13188K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(e0) BIOS, date 03/13/00, BIOS32 rev. 0 @
0xf0680, SMBIOS rev. 2.3 @ 0xf1d30 (42 entries)
bios0: ASUSTeK Computer INC. P3V133
apm0 at bios0: Power Management spec V1.2
apm0: AC on, battery charge unknown
apm0: flags 30102 dobusy 0 doidle 1
pcibios0 at bios0: rev 2.1 @ 0xf0000/0xd02
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf0c80/128 (6 entries)
pcibios0: PCI Interrupt Router at 000:04:0 ("VIA VT82C586 ISA" rev 0x00)
pcibios0: PCI bus #1 is the last bus
bios0: ROM list: 0xc0000/0x8000
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 "VIA VT82C691 PCI" rev 0x44
ppb0 at pci0 dev 1 function 0 "VIA VT82C598 AGP" rev 0x00
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 "S3 ViRGE GX2" rev 0x04
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
pcib0 at pci0 dev 4 function 0 "VIA VT82C596A ISA" rev 0x23
pciide0 at pci0 dev 4 function 1 "VIA VT82C571 IDE" rev 0x10: ATA66,
channel 0 configured to compatibility, channel 1 configured to
compatibility
wd0 at pciide0 channel 0 drive 0: <ST3200826A>
wd0: 16-sector PIO, LBA48, 190782MB, 390721968 sectors
wd1 at pciide0 channel 0 drive 1: <ST3200826A>
wd1: 16-sector PIO, LBA48, 190782MB, 390721968 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 4
wd1(pciide0:0:1): using PIO mode 4, Ultra-DMA mode 4
wd2 at pciide0 channel 1 drive 0: <Maxtor 6Y200P0>
wd2: 16-sector PIO, LBA48, 194481MB, 398297088 sectors
wd2(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 4
"VIA VT82C596 Power" rev 0x30 at pci0 dev 4 function 3 not configured
vr0 at pci0 dev 9 function 0 "VIA VT6105 RhineIII" rev 0x8b: irq 10,
address 00:0d:61:02:15:33
ukphy0 at vr0 phy 1: Generic IEEE 802.3u media interface, rev. 9: OUI
0x004063, model 0x0034
isa0 at pcib0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pmsi0 at pckbc0 (aux slot)
pckbc0: using irq 12 for aux slot
wsmouse0 at pmsi0 mux 0
pcppi0 at isa0 port 0x61
midi0 at pcppi0: <PC speaker>
spkr0 at pcppi0
lpt0 at isa0 port 0x378/4 irq 7
lm0 at isa0 port 0x290/8: W83781D
npx0 at isa0 port 0xf0/16: using exception 16
pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
biomask eb65 netmask ef65 ttymask ffe7
pctr: 686-class user-level performance counters enabled
mtrr: Pentium Pro MTRR support
dkcsum: wd0 matches BIOS drive 0x80
dkcsum: wd1 matches BIOS drive 0x81
dkcsum: wd2 matches BIOS drive 0x82
root on wd0a
rootdev=0x0 rrootdev=0x300 rawdev=0x302