43 ответов в этой теме

[bardo]

Using Gentoo , kernel 4.4.5, Dr.Web 11.0.1

 

Installation went fine, everything seems to work except Spider Guard, so I tried to build a kernel module for it and get it going but I'm getting error when I run make :

implicit declaration of function 'preempt_enable_no_resched'

 

What can I do to solve this ?

 

 

Прикрепленные файлы:

•  drweb.png   136,33К   0 Скачано раз

[Dmitry Mikhirev]

In general dr.web kernel module is not required for 3.x and 4.x kernels, it is distributed to support older systems. Probably you have kernel configured with CONFIG_FANOTIFY disabled. You may try to enable it and rebuild kernel instead compiling module.

[bardo]

Oh yes, I see it's compiled without FANOTIFY and FANOTIFY_ACCESS_PERMISSIONS

I'll enable both, recompile kernel and try again, thanks.

[bardo]

Okay, now it works, everything I tried works fine, except Spider Gate, there's nothing in GUI that would tell me that something is wrong, for testing I checked to block all sites, I even had my own sites added to block list, just to see it in action, but none of the sites were blocked, any idea about that ? Am I missing something else in the kernel maybe ?

[Dmitry Mikhirev]

It's difficult to say, may be you are missing something related to netfilter. Can you show your current config?

[bardo]

It could also be my gentoo installation, it's my old install on other partition and it's not maintained, also I experimented a lot on it so it's possible that it's somewhat broken.

I don't even go in there, it's been several months for sure, can't even remember in what state I left it.

Anyway, for some reason I didn't want Dr.Web installed on my main system, just wanted to test it and if I liked it I would use it.

There's another issue, I'm using Demo license and it has 29 days left, but on every reboot Dr.Web is not starting (there's X on tray icon) and when I open Dr.Web it says License not installed.

Then I remove it and install it again and everything is fine, even on logout, but on reboot it gives me that every time.

Could be due to that "broken" gentoo installation (though there are no OS errors and I can use it just fine, browse net, play music, videos..) , not sure.

I'll probably install it on my main system, in the meantime here's the config from the installation where Dr.Web is used on :

 

 

Прикрепленные файлы:

•  config.zip   23,75К   2 Скачано раз

[dbanschikov]

Hello.
At the moment building LKM is broken on kernel version > 3.14.
We will try to fix it in upcoming release.
Regarding your note about other problems: do you use some kind of virtual machine for your Gentoo installation?
To debug problem with license you have to show log messages from drweb-configd.
In console do:
 

sudo drweb-ctl cfset Root.LogLevel Debug
sudo drweb-ctl cfset Root.Log /tmp/drweb-configd.log
sudo service drweb-configd restart

The problem with license will be reproduced here. Collect log file and give it to us.

And don't forget to reset changed settings to their defaults:

sudo drweb-ctl cfset -r Root.LogLevel
sudo drweb-ctl cfset -r Root.Log

Restart of drweb-configd service in the end is not required.

 

About problem with Spider Gate.

You kernel at least was built without CONFIG_NETLINK_DIAG which is required for Spider Gate.

Please recompile kernel and try again.If it doesn't help you - we need debug logs of drweb-firewall component.

Here is the recipe:

sudo drweb-ctl cfset LinuxFirewall.LogLevel Debug
sudo drweb-ctl cfset LinuxFirewall.Log /tmp/drweb-firewall.log
sudo service drweb-configd restart

The problem with firewall will be reproduced here. Collect log file and give it to us.

And don't forget to reset changed settings to their defaults:

sudo drweb-ctl cfset -r Root.LogLevel
sudo drweb-ctl cfset -r Root.Log

Сообщение было изменено dbanschikov: 02 Ноябрь 2016 - 09:02

[bardo]

As for license, there is no log until I restart the service, but if I restart the service then there is no problem, it just starts working.

So I guess the service for some reason is not starting on boot, I'll play with that later.

 

As for Spider Gate I recompiled kernel with CONFIG_NETLINK_DIAG but the problem remains.

Sites that should be blocked are not blocked and in Dr.Web when I click on Spider Gate it seems like nothing is checked, like in the picture attached below.

 

I did what you said about log, so here it is :

 

 

 GNU nano 2.5.3                             File: /tmp/drweb-firewall.log                                                                  



2016-Nov-02 15:16:51 [3513] Debug: on EPROXY mode
2016-Nov-02 15:16:51 [3513] Debug: Nothing to change
2016-Nov-02 15:16:51 [3513] Notice: Firewall 11.0.1.1607201315: Ready for service
2016-Nov-02 15:16:57 [3513] Notice: Termination signal received, exiting...
2016-Nov-02 15:16:57 [3513] Debug: netlink read thread was interrupted
2016-Nov-02 15:16:58 [3513] Debug: tcp info read thread was interrupted
2016-Nov-02 15:16:58 [3513] Debug: netlink read thread was interrupted
2016-Nov-02 15:16:58 [3513] Notice: Exit with status 107 (Process terminated by signal)
2016-Nov-02 15:16:59 [4465] Notice: LinuxFirewall 11.0.1.1607201315
2016-Nov-02 15:16:59 [4465] Debug: fw_acceptor_t: start
2016-Nov-02 15:16:59 [4465] Debug: fw_local_tie_handler_t: start
2016-Nov-02 15:16:59 [4465] Debug: fw_connector_t: start
2016-Nov-02 15:16:59 [4465] Debug: fw_context_processor_t: start
2016-Nov-02 15:16:59 [4465] Debug: on EPROXY mode
2016-Nov-02 15:16:59 [4465] Info: Acceptor on 127.0.0.1:42915 started
2016-Nov-02 15:16:59 [4465] Debug: start connection tracker
2016-Nov-02 15:16:59 [4465] Info: Trying to use netlink connection tracker
2016-Nov-02 15:16:59 [4465] Debug: checking module: nf_conntrack
2016-Nov-02 15:16:59 [4465] Debug: checking module: nf_conntrack_netlink
2016-Nov-02 15:16:59 [4465] Debug: start tcp info tracker
2016-Nov-02 15:16:59 [4465] Info: Trying to use netlink tcp info tracker
2016-Nov-02 15:16:59 [4465] Debug: checking module: nfnetlink
2016-Nov-02 15:16:59 [4465] Debug: start inodes tracker
2016-Nov-02 15:16:59 [4465] Info: Trying to use /proc inodes info tracker
2016-Nov-02 15:17:00 [4465] Debug: start interceptor
2016-Nov-02 15:17:00 [4465] Info: Trying to use nfqueue interceptor
2016-Nov-02 15:17:00 [4465] Debug: checking module: nfnetlink
2016-Nov-02 15:17:00 [4465] Debug: checking module: nfnetlink_queue
2016-Nov-02 15:17:00 [4465] Debug: Successfully connected to netlink queue 0
2016-Nov-02 15:17:00 [4465] Notice: Firewall 11.0.1.1607201315: Ready for service

Прикрепленные файлы:

•  Screenshot.png   26,93К   0 Скачано раз

[dbanschikov]

 

As for license, there is no log until I restart the service, but if I restart the service then there is no problem, it just starts working.

So I guess the service for some reason is not starting on boot, I'll play with that later.

 

As for Spider Gate I recompiled kernel with CONFIG_NETLINK_DIAG but the problem remains.

Sites that should be blocked are not blocked and in Dr.Web when I click on Spider Gate it seems like nothing is checked, like in the picture attached below.

 

I did what you said about log, so here it is :

 

 

 GNU nano 2.5.3                             File: /tmp/drweb-firewall.log                                                                  



2016-Nov-02 15:16:51 [3513] Debug: on EPROXY mode
2016-Nov-02 15:16:51 [3513] Debug: Nothing to change
2016-Nov-02 15:16:51 [3513] Notice: Firewall 11.0.1.1607201315: Ready for service
2016-Nov-02 15:16:57 [3513] Notice: Termination signal received, exiting...
2016-Nov-02 15:16:57 [3513] Debug: netlink read thread was interrupted
2016-Nov-02 15:16:58 [3513] Debug: tcp info read thread was interrupted
2016-Nov-02 15:16:58 [3513] Debug: netlink read thread was interrupted
2016-Nov-02 15:16:58 [3513] Notice: Exit with status 107 (Process terminated by signal)
2016-Nov-02 15:16:59 [4465] Notice: LinuxFirewall 11.0.1.1607201315
2016-Nov-02 15:16:59 [4465] Debug: fw_acceptor_t: start
2016-Nov-02 15:16:59 [4465] Debug: fw_local_tie_handler_t: start
2016-Nov-02 15:16:59 [4465] Debug: fw_connector_t: start
2016-Nov-02 15:16:59 [4465] Debug: fw_context_processor_t: start
2016-Nov-02 15:16:59 [4465] Debug: on EPROXY mode
2016-Nov-02 15:16:59 [4465] Info: Acceptor on 127.0.0.1:42915 started
2016-Nov-02 15:16:59 [4465] Debug: start connection tracker
2016-Nov-02 15:16:59 [4465] Info: Trying to use netlink connection tracker
2016-Nov-02 15:16:59 [4465] Debug: checking module: nf_conntrack
2016-Nov-02 15:16:59 [4465] Debug: checking module: nf_conntrack_netlink
2016-Nov-02 15:16:59 [4465] Debug: start tcp info tracker
2016-Nov-02 15:16:59 [4465] Info: Trying to use netlink tcp info tracker
2016-Nov-02 15:16:59 [4465] Debug: checking module: nfnetlink
2016-Nov-02 15:16:59 [4465] Debug: start inodes tracker
2016-Nov-02 15:16:59 [4465] Info: Trying to use /proc inodes info tracker
2016-Nov-02 15:17:00 [4465] Debug: start interceptor
2016-Nov-02 15:17:00 [4465] Info: Trying to use nfqueue interceptor
2016-Nov-02 15:17:00 [4465] Debug: checking module: nfnetlink
2016-Nov-02 15:17:00 [4465] Debug: checking module: nfnetlink_queue
2016-Nov-02 15:17:00 [4465] Debug: Successfully connected to netlink queue 0
2016-Nov-02 15:17:00 [4465] Notice: Firewall 11.0.1.1607201315: Ready for service

 

For license:

1. Setup Root.Log and Root.LogLevel.

2. Reproduce problem.

3. Show log file

 

Root.Log and Root.LogLevel will preserve their values between service restart(OS restart, power resets, whatever)

 

For Spider Gate: it seems strange. Please show output of while you are visiting some web site:

strace -s 512 -o /tmp/drweb-firewall.strace -fp $(pgrep drweb-firewall)

Be careful, strace output can contain sensitive data.

[bardo]

License: Problem is that when I log in after a reboot there are no logs in the /tmp folder , so I thought that if service isn't started they get deleted or something, they appear only when I restart the service.

And when I open up that log it shows only what happens from the point when service was restarted, but okay maybe I'm wrong so here it is :

2016-Nov-02 20:28:54 [3498] Notice: LinuxFirewall 11.0.1.1607201315
2016-Nov-02 20:28:54 [3498] Debug: fw_acceptor_t: start
2016-Nov-02 20:28:54 [3498] Debug: fw_local_tie_handler_t: start
2016-Nov-02 20:28:54 [3498] Debug: fw_connector_t: start
2016-Nov-02 20:28:54 [3498] Debug: fw_context_processor_t: start
2016-Nov-02 20:28:54 [3498] Debug: on EPROXY mode
2016-Nov-02 20:28:54 [3498] Info: Acceptor on 127.0.0.1:44390 started
2016-Nov-02 20:28:54 [3498] Debug: start connection tracker
2016-Nov-02 20:28:54 [3498] Info: Trying to use netlink connection tracker
2016-Nov-02 20:28:54 [3498] Debug: checking module: nf_conntrack
2016-Nov-02 20:28:54 [3498] Debug: checking module: nf_conntrack_netlink
2016-Nov-02 20:28:54 [3498] Debug: loading module: nf_conntrack_netlink
2016-Nov-02 20:28:54 [3498] Debug: start tcp info tracker
2016-Nov-02 20:28:54 [3498] Info: Trying to use netlink tcp info tracker
2016-Nov-02 20:28:54 [3498] Debug: checking module: nfnetlink
2016-Nov-02 20:28:54 [3498] Debug: start inodes tracker
2016-Nov-02 20:28:54 [3498] Info: Trying to use /proc inodes info tracker
2016-Nov-02 20:28:54 [3498] Debug: start interceptor
2016-Nov-02 20:28:54 [3498] Info: Trying to use nfqueue interceptor
2016-Nov-02 20:28:54 [3498] Debug: checking module: nfnetlink
2016-Nov-02 20:28:54 [3498] Debug: checking module: nfnetlink_queue
2016-Nov-02 20:28:54 [3498] Debug: loading module: nfnetlink_queue
2016-Nov-02 20:28:54 [3498] Debug: Successfully connected to netlink queue 0
2016-Nov-02 20:28:55 [3498] Notice: Firewall 11.0.1.1607201315: Ready for service

Spider Gate and tmp/drweb-firewall.strace output :

I can't post a reply with it : "Your post was too long. Please go back and shorten it a little."

 

So I had to attach it.

 

 

Прикрепленные файлы:

•  drweb-firewall.strace.tar.gz   1,95К   4 Скачано раз

[dbanschikov]

License: Problem is that when I log in after a reboot there are no logs in the /tmp folder , so I thought that if service isn't started they get deleted or something, they appear only when I restart the service.
And when I open up that log it shows only what happens from the point when service was restarted, but okay maybe I'm wrong so here it is :

Service drweb-configd should be running regardless of the license presence. It seems like service drweb-configd is simply not started after system startup.
Please show output of:

pgrep -fl drweb-configd
service drweb-configd status
lsof -np $(pgrep drweb-configd)
drweb-ctl cfshow Root

just after you login to the system.

 

Spider Gate and tmp/drweb-firewall.strace output :
I can't post a reply with it : "Your post was too long. Please go back and shorten it a little."
So I had to attach it.

 


I need some time for investigation.

Сообщение было изменено dbanschikov: 02 Ноябрь 2016 - 23:44

[bardo]

# pgrep -fl drweb-configd

 

# service drweb-configd status

Dr.Web drweb-configd is not running

 

# lsof -np $(pgrep drweb-configd)

lsof: no process ID specified

lsof 4.89

 latest revision: ftp://lsof.itap.purdue.edu/pub/tools/unix/lsof/

 latest FAQ: ftp://lsof.itap.purdue.edu/pub/tools/unix/lsof/FAQ

 latest man page: ftp://lsof.itap.purdue.edu/pub/tools/unix/lsof/lsof_man

 usage: [-?abhKlnNoOPRtUvVX] [+|-c c] [+|-d s] [+D D] [+|-E] [+|-e s] [+|-f[gG]]

 [-F [f]] [-g [s]] [-i [i]] [+|-L [l]] [+m [m]] [-o [o]] [-p s]

 [+|-r [t]] [-s [p:s]] [-S [t]] [-T [t]] [-u s] [+|-w] [-x [fl]] [--] [names]

Use the ``-h'' option to get more help information.

 

# drweb-ctl cfshow Root

Error: connect: No such file or directory: "/var/run/.com.drweb.public"

 

It just doesn't start for some reason on boot, have no idea why, it's listed on services to start, when I start the service manually then the output of those commands are populated as it should :

 

# service drweb-configd start

Starting Dr.Web drweb-configd...

 

# pgrep -fl drweb-configd

3863 drweb-configd.r

 

# service drweb-configd status

Dr.Web drweb-configd is running

 

# lsof -np $(pgrep drweb-configd)

COMMAND    PID USER   FD      TYPE             DEVICE SIZE/OFF    NODE NAME

drweb-con 3863 root  cwd       DIR               8,19     4096       2 /

drweb-con 3863 root  rtd       DIR               8,19     4096       2 /

drweb-con 3863 root  txt       REG               8,19  3402616 1847563 /opt/drweb.com/bin/drweb-configd.real

drweb-con 3863 root  mem       REG               8,19    14344 2255434 /lib64/libdl-2.22.so

drweb-con 3863 root  mem       REG               8,19    88456 1719697 /lib64/libz.so.1.2.8

drweb-con 3863 root  mem       REG               8,19  1879888 1847539 /opt/drweb.com/lib64/libicuuc.so.53.1

drweb-con 3863 root  mem       REG               8,19  2839680 1847527 /opt/drweb.com/lib64/libicui18n.so.53.1

drweb-con 3863 root  mem       REG               8,19     1656 1847525 /opt/drweb.com/lib64/libicudata.so.53.1

drweb-con 3863 root  mem       REG               8,19    26432 1847543 /opt/drweb.com/lib64/libboost_chrono.so.1.58.0

drweb-con 3863 root  mem       REG               8,19  1676672 2254663 /lib64/libc-2.22.so

drweb-con 3863 root  mem       REG               8,19    92320 1201993 /usr/lib64/gcc/x86_64-pc-linux-gnu/5.3.0/libgcc_s.so.1

drweb-con 3863 root  mem       REG               8,19  1034352 2255092 /lib64/libm-2.22.so

drweb-con 3863 root  mem       REG               8,19  1565992 1202024 /usr/lib64/gcc/x86_64-pc-linux-gnu/5.3.0/libstdc++.so.6.0.21

drweb-con 3863 root  mem       REG               8,19    31432 2255851 /lib64/librt-2.22.so

drweb-con 3863 root  mem       REG               8,19    59840 1998763 /lib64/libpam.so.0.84.1

drweb-con 3863 root  mem       REG               8,19   133856 2255123 /lib64/libpthread-2.22.so

drweb-con 3863 root  mem       REG               8,19  2023512 1846702 /opt/drweb.com/lib64/libcrypto.so.1.0.0

drweb-con 3863 root  mem       REG               8,19  2687608 1846710 /opt/drweb.com/lib64/libprotobuf.so.9.0.1

drweb-con 3863 root  mem       REG               8,19   128192 1847557 /opt/drweb.com/lib64/libboost_thread.so.1.58.0

drweb-con 3863 root  mem       REG               8,19    12672 1847556 /opt/drweb.com/lib64/libboost_system.so.1.58.0

drweb-con 3863 root  mem       REG               8,19    21704 1847552 /opt/drweb.com/lib64/libboost_random.so.1.58.0

drweb-con 3863 root  mem       REG               8,19   458696 1847551 /opt/drweb.com/lib64/libboost_program_options.so.1.58.0

drweb-con 3863 root  mem       REG               8,19   856344 1847547 /opt/drweb.com/lib64/libboost_locale.so.1.58.0

drweb-con 3863 root  mem       REG               8,19    91208 1847545 /opt/drweb.com/lib64/libboost_filesystem.so.1.58.0

drweb-con 3863 root  mem       REG               8,19   144616 2255118 /lib64/ld-2.22.so

drweb-con 3863 root    0u      CHR                1,3      0t0    1030 /dev/null

drweb-con 3863 root    1u      CHR                1,3      0t0    1030 /dev/null

drweb-con 3863 root    2u      CHR                1,3      0t0    1030 /dev/null

drweb-con 3863 root    3r     FIFO                0,8      0t0   15872 pipe

drweb-con 3863 root    4w     FIFO                0,8      0t0   15872 pipe

drweb-con 3863 root    5u  a_inode                0,9        0       6 [eventpoll]

drweb-con 3863 root    6r     FIFO                0,8      0t0   15873 pipe

drweb-con 3863 root    7w     FIFO                0,8      0t0   15873 pipe

drweb-con 3863 root    8wW     REG               0,15        5   15874 /run/drweb-configd.pid

drweb-con 3863 root    9r     FIFO                0,8      0t0   15875 pipe

drweb-con 3863 root   10w      REG               8,19    10599  656902 /tmp/drweb-configd.log

drweb-con 3863 root   11u     unix 0xffff88003da98b80      0t0   15878 /var/run/.com.drweb.public type=STREAM

drweb-con 3863 root   12u     unix 0xffff88003da987c0      0t0   15880 /var/run/.com.drweb.admin type=STREAM

drweb-con 3863 root   13u     unix 0xffff88003dae1800      0t0   18508 /var/run/.com.drweb.public type=STREAM

drweb-con 3863 root   14u     unix 0xffff88007a1e20c0      0t0   15883 type=STREAM

drweb-con 3863 root   15u     unix 0xffff8800501ba800      0t0   15887 type=STREAM

drweb-con 3863 root   16u     unix 0xffff88003d87c0c0      0t0   15885 type=STREAM

drweb-con 3863 root   17u     unix 0xffff88003db7a840      0t0   15891 type=STREAM

drweb-con 3863 root   18u     unix 0xffff8800501ba080      0t0   15889 type=STREAM

drweb-con 3863 root   19u     unix 0xffff88002be347c0      0t0   15995 type=STREAM

drweb-con 3863 root   20u     unix 0xffff88003db7a0c0      0t0   15893 type=STREAM

drweb-con 3863 root   21u     unix 0xffff88002be88800      0t0   16189 type=STREAM

drweb-con 3863 root   22u     unix 0xffff88002be34040      0t0   15997 type=STREAM

drweb-con 3863 root   23u     unix 0xffff88004cad2840      0t0   18435 type=STREAM

drweb-con 3863 root   24u     unix 0xffff88002be88080      0t0   16191 type=STREAM

drweb-con 3863 root   26u     unix 0xffff88004cad20c0      0t0   18437 type=STREAM

 

# drweb-ctl cfshow Root

Root.LogLevel = Debug

Root.Log = /tmp/drweb-configd.log

Root.PublicSocketPath = /var/run/.com.drweb.public

Root.AdminSocketPath = /var/run/.com.drweb.admin

Root.DebugIpc = No

Root.UseCloud = Yes

Root.KeyPath = /etc/opt/drweb.com/drweb32.key

Root.CoreEnginePath = /var/opt/drweb.com/lib/drweb32.dll

Root.VirusBaseDir = /var/opt/drweb.com/bases

Root.DwsDir = /var/opt/drweb.com/dws

Root.VersionDir = 

Root.AntispamCorePath = /var/opt/drweb.com/lib/vaderetro.so

Root.AntispamEngineExePath = /opt/drweb.com/bin/drweb-ase

Root.CacheDir = /var/opt/drweb.com/cache

Root.TempDir = /tmp

Root.RunDir = /var/run

Root.VarLibDir = /var/opt/drweb.com/lib

Root.AdminGroup = 

Root.TrustedGroup = drweb

Root.DefaultLogLevel = Notice

 

Сообщение было изменено bardo: 03 Ноябрь 2016 - 02:41

[dbanschikov]

Obviously there is no problem with license. The problem is that drweb-configd is not started when system boots. Did you setup drweb-configd to start on boot, e.g.:

rc-update add drweb-configd default

?

Show output of

rc-status --all

Сообщение было изменено dbanschikov: 03 Ноябрь 2016 - 10:05

[dbanschikov]

Regarding problem with Spider Gate: recompile kernel with added option CONFIG_NETLINK_DIAG and try. If it doesn't work - please provide fresh kernel config.

[bardo]

There was no need to setup drweb-configd manually, it was already setup by the installer.

 

# rc-update -v show
       NetworkManager |      default                 
            alsasound | boot                         
               binfmt | boot                         
             bootmisc | boot                         
         busybox-ntpd |                              
     busybox-watchdog |                              
          consolefont |                              
           consolekit |      default                 
             cpupower |                              
         cups-browsed |                              
                cupsd |                              
                 dbus |      default                 
           deluge-web |                              
              deluged |                              
                devfs |                       sysinit
        device-mapper |                              
               dhcpcd |                              
                dhcpd |                              
             dhcrelay |                              
            dhcrelay6 |                              
                dmesg |                       sysinit
             dmeventd |                              
        drweb-configd |      default                 
    drweb-spider-kmod |      default                 
           fancontrol |                              
                 fsck | boot                         
                 fuse |                              
           git-daemon |                              
                  gpm |                              
             hostname | boot                         
              hwclock |                              
             iptables |                              
              keymaps | boot                         
            killprocs |              shutdown        
    kmod-static-nodes |                       sysinit
           lm_sensors |                              
                local |      default                 
           localmount | boot                         
             loopback | boot                         
                  lvm |                              
       lvm-monitoring |                              
              lvmetad |                              
      mit-krb5kadmind |                              
          mit-krb5kdc |                              
       mit-krb5kpropd |                              
              modules | boot                         
             mount-ro |              shutdown        
                 mtab | boot                         
           net-online |                              
               net.lo |                              
             netmount |      default                 
           ntp-client |                              
                 ntpd |      default                 
           nullmailer |                              
              numlock |                              
     openrc-settingsd |                              
              osclock |                              
              pciparm |                              
               procfs | boot                         
              pwcheck |                              
            pydoc-2.7 |                              
            pydoc-3.4 |                              
                 root | boot                         
               rsyncd |                              
            s6-svscan |                              
                samba |                              
            saslauthd |                              
            savecache |              shutdown        
                 sntp |                              
                 sshd |                              
                 swap | boot                         
            swapfiles | boot                         
              swclock |                              
               sysctl | boot                         
                sysfs |                       sysinit
            syslog-ng |      default                 
         termencoding | boot                         
         tmpfiles.dev |                       sysinit
       tmpfiles.setup | boot                         
               twistd |                              
                 udev |                       sysinit
          udev-settle |                              
         udev-trigger |                       sysinit
                  ufw | boot                         
              urandom | boot                         
       wpa_supplicant |                              
                  xdm |      default                 
            xdm-setup |                              

[bardo]

For some reason it doesn't let me paste # rc-status --all , says it's too long, I'll do it in parts :

 

# rc-status --all
Runlevel: shutdown
 killprocs                                                                                                                     [  stopped  ]
 savecache                                                                                                                     [  stopped  ]
 mount-ro                                                                                                                      [  stopped  ]
Runlevel: sysinit
 sysfs                                                                                                                         [  started  ]
 devfs                                                                                                                         [  started  ]
 udev                                                                                                                          [  started  ]
 kmod-static-nodes                                                                                                             [  started  ]
 dmesg                                                                                                                         [  started  ]
 tmpfiles.dev                                                                                                                  [  started  ]
 udev-trigger                                                                                                                  [  started  ]
Runlevel: default
 dbus                                                                                                                          [  started  ]
 NetworkManager                                                                                                                [  started  ]
 netmount                                                                                                                      [  started  ]
 syslog-ng                                                                                                                     [  started  ]
 consolekit                                                                                                                    [  started  ]
 xdm                                                                                                                           [  started  ]
 ntpd                                                                                                                          [  started  ]
 local                                                                                                                         [  started  ]

Runlevel: boot
 modules                                                                                                                       [  started  ]
 fsck                                                                                                                          [  started  ]
 root                                                                                                                          [  started  ]
 mtab                                                                                                                          [  started  ]
 swap                                                                                                                          [  started  ]
 localmount                                                                                                                    [  started  ]
 urandom                                                                                                                       [  started  ]
 sysctl                                                                                                                        [  started  ]
 bootmisc                                                                                                                      [  started  ]
 termencoding                                                                                                                  [  started  ]
 loopback                                                                                                                      [  started  ]
 tmpfiles.setup                                                                                                                [  started  ]
 keymaps                                                                                                                       [  started  ]
 swapfiles                                                                                                                     [  started  ]
 ufw                                                                                                                           [  started  ]
 hostname                                                                                                                      [  started  ]
 alsasound                                                                                                                     [  started  ]
 procfs                                                                                                                        [  started  ]
 binfmt                                                                                                                        [  started  ]
Dynamic Runlevel: hotplugged
Dynamic Runlevel: needed/wanted
 xdm-setup                                                                                                                     [  started  ]
Dynamic Runlevel: manual

[bardo]

Like I said, I don't know why it doesn't start on boot, it's enigmatic.

 

Spider Gate , config attached.

 

Прикрепленные файлы:

•  config.tar.gz   25,58К   4 Скачано раз

[dbanschikov]

Enable boot logging for OpenRC(See https://wiki.archlinux.org/index.php/OpenRC#Boot_logs ). And provide boot log file. Be sure to place log file not in /tmp. /var/log as in example is ok. Regarding problem with Spider Gate - does kernel recompilation help you? If not, please provide one more time strace output and also include output of lsof for running drweb-firewall process.

[bardo]

There's nothing in the rc.log regarding dr.web , never mind this one, it could be something in this installation, it probably is, I'll test Dr.Web soon in my main OS and will know more then, this is not a big problem.

 

Spider Gate is more interesting, so here is lsof :

 

# lsof -np $(pgrep drweb-firewall)
COMMAND    PID USER   FD      TYPE             DEVICE SIZE/OFF    NODE NAME
drweb-fir 3785 root  cwd       DIR               8,19     4096       2 /
drweb-fir 3785 root  rtd       DIR               8,19     4096       2 /
drweb-fir 3785 root  txt       REG               8,19  1531584 1853251 /opt/drweb.com/bin/drweb-firewall.real
drweb-fir 3785 root  mem       REG               8,19    43216 2255103 /lib64/libnss_files-2.22.so
drweb-fir 3785 root  mem       REG               8,19    43272 2255111 /lib64/libnss_nis-2.22.so
drweb-fir 3785 root  mem       REG               8,19    88784 2255110 /lib64/libnsl-2.22.so
drweb-fir 3785 root  mem       REG               8,19    31304 2255113 /lib64/libnss_compat-2.22.so
drweb-fir 3785 root  mem       REG               8,19    88456 1719697 /lib64/libz.so.1.2.8
drweb-fir 3785 root  mem       REG               8,19  1676672 2254663 /lib64/libc-2.22.so
drweb-fir 3785 root  mem       REG               8,19    92320 1201993 /usr/lib64/gcc/x86_64-pc-linux-gnu/5.3.0/libgcc_s.so.1
drweb-fir 3785 root  mem       REG               8,19  1034352 2255092 /lib64/libm-2.22.so
drweb-fir 3785 root  mem       REG               8,19  1565992 1202024 /usr/lib64/gcc/x86_64-pc-linux-gnu/5.3.0/libstdc++.so.6.0.21
drweb-fir 3785 root  mem       REG               8,19    31432 2255851 /lib64/librt-2.22.so
drweb-fir 3785 root  mem       REG               8,19   133856 2255123 /lib64/libpthread-2.22.so
drweb-fir 3785 root  mem       REG               8,19  2687608 1846710 /opt/drweb.com/lib64/libprotobuf.so.9.0.1
drweb-fir 3785 root  mem       REG               8,19    87424 1847555 /opt/drweb.com/lib64/libboost_signals.so.1.58.0
drweb-fir 3785 root  mem       REG               8,19   128192 1847557 /opt/drweb.com/lib64/libboost_thread.so.1.58.0
drweb-fir 3785 root  mem       REG               8,19    12672 1847556 /opt/drweb.com/lib64/libboost_system.so.1.58.0
drweb-fir 3785 root  mem       REG               8,19   458696 1847551 /opt/drweb.com/lib64/libboost_program_options.so.1.58.0
drweb-fir 3785 root  mem       REG               8,19    91208 1847545 /opt/drweb.com/lib64/libboost_filesystem.so.1.58.0
drweb-fir 3785 root  mem       REG               8,19   144616 2255118 /lib64/ld-2.22.so
drweb-fir 3785 root    0u      CHR                1,3      0t0    1030 /dev/null
drweb-fir 3785 root    1u      CHR                1,3      0t0    1030 /dev/null
drweb-fir 3785 root    2u     unix 0xffff88002bca1440      0t0   13258 type=STREAM
drweb-fir 3785 root    3r     FIFO                0,8      0t0   14338 pipe
drweb-fir 3785 root    4w     FIFO                0,8      0t0   14338 pipe
drweb-fir 3785 root    5u  a_inode                0,9        0       6 [eventpoll]
drweb-fir 3785 root    6r     FIFO                0,8      0t0   13601 pipe
drweb-fir 3785 root    7w     FIFO                0,8      0t0   13601 pipe
drweb-fir 3785 root    8w      REG               8,19     1576  655569 /tmp/drweb-firewall.log
drweb-fir 3785 root    9r     FIFO                0,8      0t0   13241 pipe
drweb-fir 3785 root   10u     inet              13743      0t0     TCP 127.0.0.1:38364 (LISTEN)
drweb-fir 3785 root   11u  netlink                         0t0   13774 NETFILTER
drweb-fir 3785 root   12u  netlink                         0t0   13775 INET_DIAG
drweb-fir 3785 root   13u     unix 0xffff88002bca1bc0      0t0   13256 type=STREAM
drweb-fir 3785 root   14u  netlink                         0t0   14743 NETFILTER
drweb-fir 3785 root   15u     unix 0xffff880039291400      0t0   14981 type=STREAM

Сообщение было изменено bardo: 03 Ноябрь 2016 - 18:23

[bardo]

strace :

 

 

 

Прикрепленные файлы:

•  drweb-firewall.strace.tar.gz   1,88К   1 Скачано раз