[Bug 281820] mdo: failed to call initgroups: Operation not permitted

From: <bugzilla-noreply_at_freebsd.org>
Date: Wed, 02 Oct 2024 14:10:39 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=281820

            Bug ID: 281820
           Summary: mdo: failed to call initgroups: Operation not
                    permitted
           Product: Base System
           Version: CURRENT
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: bugs@FreeBSD.org
          Reporter: jlduran@gmail.com
                CC: bapt@FreeBSD.org

As 'root' issue:

    # kldload mac_do
    # sysctl security.mac.do.rules=gid=0:any

A user 'freebsd' already exists and belongs to 'wheel':

    $ mdo pkg upgrade
uma_zalloc_debug: zone "malloc-1024" with the following non-sleepable locks
held:
exclusive sleep mutex process lock (process lock) r = 0 (0xfffffe0049457188)
locked @ /usr/src/sys/kern/kern_prot.c:846
stack backtrace:
#0 0xffffffff80bc6bfc at witness_debugger+0x6c
#1 0xffffffff80bc7df3 at witness_warn+0x403
#2 0xffffffff80ef7864 at uma_zalloc_debug+0x34
#3 0xffffffff80ef7387 at uma_zalloc_arg+0x27
#4 0xffffffff80b23d8d at malloc+0x7d
#5 0xffffffff80c2bce1 at vn_fullpath+0x41
#6 0xffffffff8331c9dc at check_setgroups+0x5c
#7 0xffffffff80e8b2e4 at mac_cred_check_setgroups+0xa4
#8 0xffffffff80b3bbc7 at kern_setgroups+0x157
#9 0xffffffff80b3ba5e at sys_setgroups+0x9e
#10 0xffffffff8107c9b8 at amd64_syscall+0x158
#11 0xffffffff8104e7bb at fast_syscall_common+0xf8
mdo: failed to call initgroups: Operation not permitted

-- 
You are receiving this mail because:
You are the assignee for the bug.