netdev - Re: ss command not showing raw sockets? (regression)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <af485441-123b-4f50-f01b-cee2612b9218@gmail.com>
Date:   Tue, 17 Aug 2021 13:54:53 -0600
From:   David Ahern <dsahern@...il.com>
To:     Jakub Kicinski <kuba@...nel.org>, Jonas Bechtel <post@...chtel.de>
Cc:     netdev@...r.kernel.org
Subject: Re: ss command not showing raw sockets? (regression)

On 8/17/21 12:44 PM, Jakub Kicinski wrote:
>> @kuba With PROC_NET_RAW I consider the problem is found, isn't it? So
>> I will not download/bisect<->build or otherwise investigate the
>> problem until one of you explicitely asks me to do so.
>>
>> I have now redirected invocation of command with set PROC_NET_RAW on
>> my system, and may (try to) update to Linux 4.19.
> 
> I suspect the bisection would end up at the commit which added 
> the netlink dump support, so you can hold off for now, yes.

agreed.
> 
> My best guess right now is that Knoppix has a cut-down kernel 
> config and we don't handle that case correctly.
> 

CONFIG_INET_RAW_DIAG (or INET_DIAG) is probably disabled. surprised the
netlink dump does not return an error and it falls back to the proc file:

        if (!getenv("PROC_NET_RAW") && !getenv("PROC_ROOT") &&
            inet_show_netlink(f, NULL, IPPROTO_RAW) == 0)
                return 0;

can you strace it?