| Re: [chrony-users] chronyc serverstats => 501 not autorized |
[ Thread Index | Date Index | More chrony.tuxfamily.org/chrony-users Archives ]
Hi !Sorry here again... if this now is not complete i have to send it in the evening again... here i have only limited access and possibilities
Ciao Gerd Am 19.11.2025 09:59, schrieb Miroslav Lichvar:
On Wed, Nov 19, 2025 at 09:45:39AM +0100, Gerd Hoerst wrote:here...That's incomplete. It should have some socket(), connect() and bind() system calls.Ciao Gerd Am 19.11.2025 08:22, schrieb Miroslav Lichvar: > On Tue, Nov 18, 2025 at 04:49:00PM +0100, Gerd Hoerst wrote: > > I disabled apparmor completely... even if Not i would see a message > > in syslog > > Hm, I'm not sure what else could be wrong. Please post the output of > "strace chronyc -u root serverstats".
gerd@capricorn:~/cloud/it$ strace chronyc -u root serverstats > txt.txt
execve("/usr/bin/chronyc", ["chronyc", "-u", "root", "serverstats"], 0x7ffdd79a8f58 /* 28 vars */) = 0
brk(NULL) = 0x5c602e3d5000
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x774612786000
access("/etc/ld.so.preload", R_OK) = 0
openat(AT_FDCWD, "/etc/ld.so.preload", O_RDONLY|O_CLOEXEC) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=28, ...}) = 0
mmap(NULL, 28, PROT_READ|PROT_WRITE, MAP_PRIVATE, 3, 0) = 0x774612785000
close(3) = 0
openat(AT_FDCWD, "/opt/lib/libmediaclient.so", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\240\35\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=68232, ...}) = 0
mmap(NULL, 4263024, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_DENYWRITE, -1, 0) = 0x774612374000
mmap(0x774612400000, 2165872, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0) = 0x774612400000
munmap(0x774612374000, 573440) = 0
munmap(0x774612611000, 1522800) = 0
mprotect(0x774612410000, 2093056, PROT_NONE) = 0
mmap(0x77461260f000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xf000) = 0x77461260f000
close(3) = 0
munmap(0x774612785000, 28) = 0
openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=95651, ...}) = 0
mmap(NULL, 95651, PROT_READ, MAP_PRIVATE, 3, 0) = 0x77461276e000
close(3) = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libm.so.6", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=952616, ...}) = 0
mmap(NULL, 950296, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x774612685000
mmap(0x774612695000, 520192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x10000) = 0x774612695000
mmap(0x774612714000, 360448, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x8f000) = 0x774612714000
mmap(0x77461276c000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xe7000) = 0x77461276c000
close(3) = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libnettle.so.8", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=342280, ...}) = 0
mmap(NULL, 344192, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x774612630000
mmap(0x77461263c000, 192512, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xc000) = 0x77461263c000
mmap(0x77461266b000, 94208, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3b000) = 0x77461266b000
mmap(0x774612682000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x51000) = 0x774612682000
close(3) = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libedit.so.2", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=220472, ...}) = 0
mmap(NULL, 233600, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7746123c6000
mmap(0x7746123ce000, 126976, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x8000) = 0x7746123ce000
mmap(0x7746123ed000, 49152, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x27000) = 0x7746123ed000
mmap(0x7746123f9000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x33000) = 0x7746123f9000
mmap(0x7746123fc000, 12416, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7746123fc000
close(3)
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libtinfo.so.6", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=208328, ...}) = 0
mmap(NULL, 211240, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x774612392000
mmap(0x7746123a0000, 77824, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xe000) = 0x7746123a0000
mmap(0x7746123b3000, 57344, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x21000) = 0x7746123b3000
mmap(0x7746123c1000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2e000) = 0x7746123c1000
close(3) = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libbsd.so.0", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=80888, ...}) = 0
mmap(NULL, 86208, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x77461237c000
mmap(0x774612380000, 49152, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x774612380000
mmap(0x77461238c000, 12288, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x10000) = 0x77461238c000
mmap(0x77461238f000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x12000) = 0x77461238f000
mmap(0x774612391000, 192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x774612391000
close(3) = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libmd.so.0", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=55536, ...}) = 0
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x77461261d000
mmap(NULL, 57448, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x77461236d000
mmap(0x77461236f000, 36864, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x77461236f000
mmap(0x774612378000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x774612378000
mmap(0x77461237a000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xc000) = 0x77461237a000
close(3) = 0
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x77461261b000
arch_prctl(ARCH_SET_FS, 0x77461261bb80) = 0
set_tid_address(0x77461261be50) = 82903
set_robust_list(0x77461261be60, 24) = 0
rseq(0x77461261c4a0, 0x20, 0, 0x53053053) = 0
mprotect(0x7746121ff000, 16384, PROT_READ) = 0
mprotect(0x77461237a000, 4096, PROT_READ) = 0
mprotect(0x77461238f000, 4096, PROT_READ) = 0
mprotect(0x7746123c1000, 16384, PROT_READ) = 0
mprotect(0x774612622000, 4096, PROT_READ) = 0
mprotect(0x774612627000, 4096, PROT_READ) = 0
mprotect(0x77461262c000, 4096, PROT_READ) = 0
mprotect(0x7746123f9000, 8192, PROT_READ) = 0
mprotect(0x774612682000, 8192, PROT_READ) = 0
mprotect(0x77461276c000, 4096, PROT_READ) = 0
mprotect(0x77461260f000, 4096, PROT_READ) = 0
mprotect(0x5c600c24b000, 4096, PROT_READ) = 0
mprotect(0x7746127c4000, 8192, PROT_READ) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
munmap(0x77461276e000, 95651) = 0
ioctl(0, TCGETS, {c_iflag=ICRNL|IXON|IXANY|IMAXBEL, c_oflag=NL0|CR0|TAB0|BS0|VT0|FF0|OPOST|ONLCR, c_cflag=B38400|CS8|CREAD, c_lflag=ISIG|ICANON|ECHO|ECHOE|IEXTEN|ECHOCTL|ECHOKE, ...}) = 0
ioctl(1, TCGETS, 0x7ffed7316c80) = -1 ENOTTY (Unpassender IOCTL (I/O-Control) für das Gerät)
rt_sigaction(SIGINT, {sa_handler=0x5c600c238470, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x774612045330}, NULL, 8) = 0
rt_sigaction(SIGTERM, {sa_handler=0x5c600c238470, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x774612045330}, NULL, 8) = 0
rt_sigaction(SIGQUIT, {sa_handler=0x5c600c238470, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x774612045330}, NULL, 8) = 0
rt_sigaction(SIGHUP, {sa_handler=0x5c600c238470, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x774612045330}, NULL, 8) = 0
rt_sigaction(SIGPIPE, {sa_handler=0x5c600c238470, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x774612045330}, NULL, 8) = 0
getrandom("\xe8\xd1\x92\x32\x29\x2c\x96\x0f", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x5c602e3d5000
brk(0x5c602e3f6000) = 0x5c602e3f6000
socket(AF_INET, SOCK_DGRAM|SOCK_CLOEXEC, IPPROTO_IP) = 3
fcntl(3, F_GETFD) = 0x1 (flags FD_CLOEXEC)
fcntl(3, F_GETFL) = 0x2 (flags O_RDWR)
close(3) = 0
socket(AF_INET, SOCK_DGRAM|SOCK_NONBLOCK, IPPROTO_IP) = 3
fcntl(3, F_GETFD) = 0
fcntl(3, F_GETFL) = 0x802 (flags O_RDWR|O_NONBLOCK)
close(3) = 0
socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3
connect(3, {sa_family=AF_UNIX, sun_path="/run/chrony/chronyd.sock"}, 27) = -1 EACCES (Keine Berechtigung)
getsockname(3, {sa_family=AF_UNIX}, [112 => 2]) = 0
close(3) = 0
socket(AF_INET, SOCK_DGRAM|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3
connect(3, {sa_family=AF_INET, sin_port=htons(323), sin_addr=inet_addr("127.0.0.1")}, 16) = 0
getrandom("\x50\xb2\xdc\xb9\x82\x98\x3f\x32\x8f\x21\xdb\xce\xdd\xdf\x08\x38\x65\x91\xa9\x6f\x57\xd0\xb8\xf9\x31\x25\xca\xfe\xaf\x17\x10\xfd"..., 256, GRND_NONBLOCK) = 256
sendto(3, "\6\1\0\0\0006\0\0Ew\323\236\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 196, 0, NULL, 0) = 196
pselect6(4, [3], NULL, NULL, {tv_sec=1, tv_nsec=0}, NULL) = 1 (in [3], left {tv_sec=0, tv_nsec=999988935})
recvfrom(3, "\6\2\0\0\0006\0\1\0\2\0\0\0\0\0\0Ew\323\236\0\0\0\0\0\0\0\0", 524, 0, NULL, NULL) = 28
fstat(1, {st_mode=S_IFREG|0664, st_size=0, ...}) = 0
write(1, "501 Not authorised\n", 19) = 19
getsockname(3, {sa_family=AF_INET, sin_port=htons(39208), sin_addr=inet_addr("127.0.0.1")}, [112 => 16]) = 0
close(3) = 0
exit_group(1) = ?
+++ exited with 1 +++
| Mail converted by MHonArc 2.6.19+ | http://listengine.tuxfamily.org/ |