From nobody Fri Jun 12 17:59:02 2026 X-Original-To: freebsd-current@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4gcS2F3g1Dz6gl6k for ; Fri, 12 Jun 2026 17:59:17 +0000 (UTC) (envelope-from oleg.nauman@gmail.com) Received: from mail-qv1-xf2a.google.com (mail-qv1-xf2a.google.com [IPv6:2607:f8b0:4864:20::f2a]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "WR4" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4gcS2D2dtrz3xL2 for ; Fri, 12 Jun 2026 17:59:16 +0000 (UTC) (envelope-from oleg.nauman@gmail.com) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20251104 header.b=MaCYud+m; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of oleg.nauman@gmail.com designates 2607:f8b0:4864:20::f2a as permitted sender) smtp.mailfrom=oleg.nauman@gmail.com; arc=pass ("google.com:s=arc-20240605:i=1") Received: by mail-qv1-xf2a.google.com with SMTP id 6a1803df08f44-8ce9df48e1bso15081846d6.1 for ; Fri, 12 Jun 2026 10:59:16 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1781287154; cv=none; d=google.com; s=arc-20240605; b=ArCGqBZcT2pGgPyAccodqAehRwCRHTOp3zqx5qax7rSq+czIPI5eQ3uzVgGsembfOc 7lFojeARA/b1xiPL7RYFi2CkGa9ZbjSnxKEimbxwHcqlCDNbh5OC9zUXy279tG5O0FPZ aQfeU3nZjdTYgMLPCAyDpSTtHoD9Akh05fS9n1ndwWCIA4+CnaJzYi+BoxPT8tccWASa QHd3czHo0dP1B0TE1M5XJUlyytTF+E2b1u9YFXeLAjz2HXb6P4sbsZdegOC3ReIHirvS CbV7i8Wdvo07/PVpXcHgOH9NoVn/xQtx8p0dDDqxp7M0xQEfvf43xdZMwRTZTjXKYMFW /x4g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:dkim-signature; bh=QSD3XdZ7U56a78YdSQqBz67eoJBPW7PzwJsR0gGBCN8=; fh=le3vsEhM3mq1mNGmYDndpCojA6c3ncX0/2NFBtvZu08=; b=ZtP6W+bVf1yNVGk8F90PdNDntzH1auRpMNNhtEwbi4uIw/lT4uWNcz1U4jrvNLYW87 EpWR1jyFw1uUsUZ91L3hbjH+vBDMUFhNSv51GI0atfXXlDow2Al7Q1+Fm0N6ukeIu0RY P5LwUwCXqZr/1FNwwwDZaJ5ndZy4ve1wAtZNir/sdFA0XqDapmhpFHk3O3p0G7FAN7YC HjtETKAvrugx4fij08Lx6JWjNpVj1MIf+cmNdhDXJxW1cBRt49cHCxfK/lGSMTYKww6T lL4T1Rf1iy9ixQr/XQ0b8gfYiz9Yyc3dzJKpoK28fD20XibMbs0BtAsKTTlXTEbUFZn9 QV+A==; darn=freebsd.org ARC-Authentication-Results: i=1; mx.google.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1781287154; x=1781891954; darn=freebsd.org; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=QSD3XdZ7U56a78YdSQqBz67eoJBPW7PzwJsR0gGBCN8=; b=MaCYud+mDpOViy6mtX9XNVUCZRD45N4He1NZIs2R/RpcI5fD4/aLRLAujaIjG5eJuO m2bRFnAsazfIwnC37pvA1B2ehypwcUl1wpx3rQ2AGJy0THpw7ZnVMIbstH1ouqnVW7mx yXONmaNxLLTHsP3mvR/fj52tBYhozBajQL/gidyO06/oprR/7CstGPHMsCLbQnOdEb4p niZ2qG9oBb4sv2cTKqfAYCxhS+bGhutaHPkAr+VEuXcom2uljhYmH5ZynnAaSusG/8w7 i/haJsBmQ5t/hoJtdzenpAbHoBbByG5bSdWIRxToJjyGDI9cQONjjMacjASnGd5ENC0i o9WQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1781287154; x=1781891954; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=QSD3XdZ7U56a78YdSQqBz67eoJBPW7PzwJsR0gGBCN8=; b=kSIr2l0QmGlQng735KA85lUMj/V1FC5Z654XppQmzXiCjWHjLFsu5mz5gGyxdLfUqc a7HV+QrKd5191TWunDCu//wcHL5fToKCS6c9B4ptZAAuWncdsFkIAKkrNG9zWk/rXCCf 4LFXJYp/omEDvF4RPwy++sZqC54P0rl6hshUNaxdBd/JVaFlceZXJNQzrHNL077Aq+nb /gNJ2ctTlcOP2bmSExClZrZOvpgpKVMLs75PTz643MrLxB3+81ct8aaxTqywdh0B8iWW JcnfDmPVau/2yzTd+PqLjpLJut6HhBndyOQmbD6S5z+6VrznzjhSzy9/llAcQj4JYqlP RArg== X-Gm-Message-State: AOJu0Yy+qy9BPoAszaUnJIvd86LP7TDD8ITBHl7XgklnHxMaI3BuzT4e GGxio1eFMDxpY0np21vXpv6YkOQTjPCbttZNZR6IYpgS4rcLHb7CvGaCcO9L2+B9DP4GcE7jd4Y xanHMNqmHiMSG0mtpGD6tARhMcHRUQYenQ/cP X-Gm-Gg: Acq92OE85nvhTr9URIWQpczga9gS0uXxQrYThg62AS7e9JeIyQAvPoEVt2cjEu25pPe FCByD8WtzCEoaZF2cH/OXnq704g30ceW8Rcu9BCjz6fkvvSXpPxW1bVUzKxvev46t+pbW2ox0nN fOfbrwE8sLty1xXZhsVNsDmSWa7rb+lZs0iw4Pc7K41G6/2Q7AwcgSfdDWlKg7tPPI2MAtIRETC QPcTgKYfIq1zEx66cIxX3bjtt9x1tQS8Bkph3sqHEHXXgsCVTRCwlQDqEAFPMMsGFV50UFue5lb JLEEuQ== X-Received: by 2002:a05:6214:5989:b0:8cc:f175:3ac4 with SMTP id 6a1803df08f44-8d32f3a9d23mr73534146d6.43.1781287154135; Fri, 12 Jun 2026 10:59:14 -0700 (PDT) List-Id: Discussions about the use of FreeBSD-current List-Archive: https://lists.freebsd.org/archives/freebsd-current List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-current@FreeBSD.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 References: In-Reply-To: From: Oleg Nauman Date: Fri, 12 Jun 2026 20:59:02 +0300 X-Gm-Features: AVVi8CdUxa2n3wlZygX6rLrVGol9Dceo9Z18fnHKiDxOcRkltxsvUW_5ePcw9U8 Message-ID: Subject: Re: "CAP system call not allowed" for linux apllications To: Konstantin Belousov Cc: FreeBSD Current Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Spamd-Result: default: False [-4.96 / 15.00]; ARC_ALLOW(-1.00)[google.com:s=arc-20240605:i=1]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_HAM_SHORT(-0.96)[-0.963]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4864::/56]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20251104]; MIME_GOOD(-0.10)[text/plain]; RCVD_TLS_LAST(0.00)[]; TO_DN_ALL(0.00)[]; MIME_TRACE(0.00)[0:+]; FREEMAIL_ENVFROM(0.00)[gmail.com]; TAGGED_FROM(0.00)[]; FREEMAIL_FROM(0.00)[gmail.com]; FREEMAIL_TO(0.00)[gmail.com]; RCPT_COUNT_TWO(0.00)[2]; FROM_HAS_DN(0.00)[]; MISSING_XM_UA(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[freebsd-current@freebsd.org]; TO_MATCH_ENVRCPT_SOME(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; DKIM_TRACE(0.00)[gmail.com:+]; MID_RHS_MATCH_FROMTLD(0.00)[]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; MLMMJ_DEST(0.00)[freebsd-current@freebsd.org]; DWL_DNSWL_NONE(0.00)[gmail.com:dkim]; RCVD_COUNT_ONE(0.00)[1]; RCVD_IN_DNSWL_NONE(0.00)[2607:f8b0:4864:20::f2a:from] X-Spamd-Bar: ---- X-Rspamd-Queue-Id: 4gcS2D2dtrz3xL2 Well, it looks like the next update ( currently it is HEAD at 1f68ca5802db ) has fixed this issue. Thank you On Wed, Jun 10, 2026 at 11:31=E2=80=AFAM Konstantin Belousov wrote: > > On Wed, Jun 10, 2026 at 09:19:14AM +0300, Oleg Nauman wrote: > > I have updated my CURRENT amd64 to c3d8aca1d43e and discovered that > > linux applications fail to run . > > It seems the failure reason is capsicum that blocks execution of linux > > syscalls, for example from ktrace/kdump output: > > > > CALL linux_socket(0x1,0x80001,0) > > CAP system call not allowed: linux_clock_gettime > > CAP system call not allowed: linux_socket > > RET linux_socket 8 > > CALL linux_clock_gettime 0 > > CALL linux_connect(0x8,0x7fffffffb450,0x14) > > CALL linux_clock_gettime(CLOCK_MONOTONIC,0x825829310) > > CAP system call not allowed: linux_connect > > CAP system call not allowed: linux_clock_gettime > > NAMI "" > > RET linux_connect -1 errno -88 Socket operation on non-socket > > RET linux_clock_gettime 0 > > CALL close(0x8) > > CALL linux_poll(0x8280054d0,0x2,0x6221) > > CAP system call not allowed: linux_poll > > CAP system call not allowed: close > > RET close 0 > > RET linux_poll 1 > > CALL linux_clock_gettime(CLOCK_MONOTONIC,0x825829300) > > CAP system call not allowed: linux_clock_gettime > > CALL linux_write(0x2,0x7fffffff92d0,0x2c) > > CAP system call not allowed: linux_write > > RET linux_clock_gettime 0 > > GIO fd 2 wrote 44 bytes > > "qt.qpa.xcb: could not connect to display :0 > > " > I cannot reproduce it, for me HEAD just worked. > > The trace above is also strange, if you look, the syscalls report > successful results, it looks like the 'CAP' records intervene out > of thin air. >