From nobody Thu Sep 14 20:49:11 2023 X-Original-To: freebsd-stable@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4RmqDp6PF0z4sNNc for ; Thu, 14 Sep 2023 20:49:14 +0000 (UTC) (envelope-from des@freebsd.org) Received: from smtp.freebsd.org (smtp.freebsd.org [IPv6:2610:1c1:1:606c::24b:4]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "smtp.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4RmqDp5tnpz4Yys; Thu, 14 Sep 2023 20:49:14 +0000 (UTC) (envelope-from des@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1694724554; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=NnfnWY7TIshJsnXy7292d9g9RofuwJzHymMjmOUebjE=; b=Bt95akc235Nj7cMdKDiEwbYzxDa2BMUvar4FHCrYEGzZB9Jdaz6zxXfdbaq69kY72Zm9Ov M3knfWbO+FX50cltO/fei0Ajc62f2SmW/0Jqr+b5lAyFqi8h4W6A8/3drGkJUySJDv5NFp etgz7mIMsc6pV59urlskBjiZwuOkTJhruoOLuF0LrDDwc/OB6yp2fgJuaNHHxxyGbLPHvC KuQWpicazcyPjiDnJxjH1Fnl+jGhNNqPYBqy6lCCU1zrpE1UM9FE4VQbgGQQaZaRclwrEI ZL8MXhghpqmJ1eJvcDe6De7i0rzPMoWJ4CVxCYIzFSZJHLLi1g6p2tPxcM47hA== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1694724554; a=rsa-sha256; cv=none; b=XkLIYDXA/FjHE4sWSN3RbU0bDK6UtA+uzqrr4s9aqWl0Cp9O/2X6AUnmnhfC3of3/wfU37 AzbLl80fhEowpcz0QPeaiyg3ibB/yHQVJ1Ri+WbqwtXEt7MRGi7gIYcogptOmu8Es7YKXU F/mQU6tZ1M9mL1qTsxIwfsO56A2Wi0kCZaNgIMJrPwHk62BVdNyCqdpIeWw0oEAWiHrlEe jdnkBV2tWrJSeRgD/+SBADrYEhEmAvVYrozbmNOz1nUxOW4Cm9y2Eo1PxaN4U5Q7Src5zc WFEz6ImByriwyIklMcDAFTGfqLp5hbVuUFRUurCIHzcGdKolowcOqCkXqFrVog== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1694724554; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=NnfnWY7TIshJsnXy7292d9g9RofuwJzHymMjmOUebjE=; b=DSUHR43vqTttiDkNO98Q+pAhUuLzGCRFtkwX5dFq52sXcWhPL4EHNBlUbDLThf6zzSUQ2L O7+4mw3g8IKB98rkP1n08N3JpCR8hNQ4IIUeyyPbB3+eSGYRZ2uTYNI/9GjZWAI66Ia7p/ uySW7StX4y6eLnWhfbeiO8Rl56GNi5KS4kb9G7VHzovyEXUX3b/2O1ZbTkiX76G3qp+bnt rskkn0TCU7dXHfBtXyDGiO0K1sV242wtn0kpdzyfyun145jJQqm+MkTQeB6u4enPt/qytH Z6Hblsg+PiHN8CLeBztOe+mZ6RxDyCbfj4xsUmZgP9ilNpqzF1sAS51B4HMfVA== Received: from ltc.des.no (unknown [IPv6:2001:4647:d671:0:36e8:94ff:feca:9834]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) (Authenticated sender: des) by smtp.freebsd.org (Postfix) with ESMTPSA id 4RmqDp448jz4B3; Thu, 14 Sep 2023 20:49:14 +0000 (UTC) (envelope-from des@freebsd.org) Received: by ltc.des.no (Postfix, from userid 1001) id DAA2B78B94; Thu, 14 Sep 2023 22:49:11 +0200 (CEST) From: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= To: mike tancsa Cc: FreeBSD-STABLE Mailing List , jrm@FreeBSD.org Subject: Re: tcpdump and timezone mismatch (STABLE 14 vs STABLE 13) In-Reply-To: (mike tancsa's message of "Thu, 14 Sep 2023 12:24:45 -0400") References: User-Agent: Gnus/5.13 (Gnus v5.13) Date: Thu, 14 Sep 2023 22:49:11 +0200 Message-ID: <86edj0pjjs.fsf@ltc.des.no> List-Id: Production branch of FreeBSD source code List-Archive: https://lists.freebsd.org/archives/freebsd-stable List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-stable@freebsd.org X-BeenThere: freebsd-stable@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable mike tancsa writes: > Just starting to play around with RELENG_14 and noticed one odd thing > I didnt see in the UPDATING notes. The server's Timezone is set to > EDT (GMT-4), but tcpdumping the pflogs show it in UTC. In stable/13, tcpdump reads /etc/localtime very early, and long before entering capability mode: 72111 tcpdump 0.007527 NAMI "/etc/localtime" 72111 tcpdump 0.007541 RET open 3 72111 tcpdump 0.007549 CALL read(0x3,0x1a9058bb78c0,0xd6b8) 72111 tcpdump 0.007627 RET read 2298/0x8fa 72111 tcpdump 0.007634 CALL close(0x3) 72111 tcpdump 0.007642 RET close 0 [...] 72111 tcpdump 0.024369 CALL cap_enter 72111 tcpdump 0.024381 RET cap_enter 0 In main and stable/14, it enters capability mode immediately before the first attempt to read /etc/localtime, which fails: 745 tcpdump 0.069967829 CALL cap_enter 745 tcpdump 0.070015646 RET cap_enter 0 745 tcpdump 0.070139522 CALL fstatat(AT_FDCWD,0x1c377723d38e,0x1c37734= 30d00 ,0) 745 tcpdump 0.070196299 NAMI "/etc/localtime" 745 tcpdump 0.070240578 RET fstatat -1 errno 94 Not permitted in capa= bility mode 745 tcpdump 0.070487574 CALL fstatat(AT_FDCWD,0x1c377723d38e,0x1c37734= 30cd0,0) 745 tcpdump 0.070550458 NAMI "/etc/localtime" 745 tcpdump 0.070593003 RET fstatat -1 errno 94 Not permitted in capa= bility mode The simplest workaround is to call tzset(3) before entering capability mode. DES --=20 Dag-Erling Sm=C3=B8rgrav - des@FreeBSD.org