We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
General Information
Linux pingu 6.10.2-arch1-1 #1 SMP PREEMPT_DYNAMIC Sat, 27 Jul 2024 16:49:55 +0000 x86_64 GNU/Linux
To Reproduce
Aug 12 10:53:45 pingu kubearmor[402510]: 2024-08-12 10:53:45.620909 ERROR error loading BPF LSM objects: field EnforceNetAccept: program enforce_net_accept: load program: permission denied: 2: (69) r2 = *(u16 *)(r2 +574): R2 invalid mem access 'trusted_ptr_or_null_' (7 line(s) omitted) Aug 12 10:53:45 pingu kubearmor[402510]: github.com/kubearmor/KubeArmor/KubeArmor/log.Err Aug 12 10:53:45 pingu kubearmor[402510]: /home/runner/work/KubeArmor/KubeArmor/KubeArmor/log/logger.go:103 Aug 12 10:53:45 pingu kubearmor[402510]: github.com/kubearmor/KubeArmor/KubeArmor/feeder.(*Feeder).Errf Aug 12 10:53:45 pingu kubearmor[402510]: /home/runner/work/KubeArmor/KubeArmor/KubeArmor/feeder/feeder.go:430 Aug 12 10:53:45 pingu kubearmor[402510]: github.com/kubearmor/KubeArmor/KubeArmor/enforcer/bpflsm.NewBPFEnforcer Aug 12 10:53:45 pingu kubearmor[402510]: /home/runner/work/KubeArmor/KubeArmor/KubeArmor/enforcer/bpflsm/enforcer.go:103 Aug 12 10:53:45 pingu kubearmor[402510]: github.com/kubearmor/KubeArmor/KubeArmor/enforcer.selectLsm Aug 12 10:53:45 pingu kubearmor[402510]: /home/runner/work/KubeArmor/KubeArmor/KubeArmor/enforcer/runtimeEnforcer.go:106 Aug 12 10:53:45 pingu kubearmor[402510]: github.com/kubearmor/KubeArmor/KubeArmor/enforcer.NewRuntimeEnforcer Aug 12 10:53:45 pingu kubearmor[402510]: /home/runner/work/KubeArmor/KubeArmor/KubeArmor/enforcer/runtimeEnforcer.go:175 Aug 12 10:53:45 pingu kubearmor[402510]: github.com/kubearmor/KubeArmor/KubeArmor/core.(*KubeArmorDaemon).InitRuntimeEnforcer Aug 12 10:53:45 pingu kubearmor[402510]: /home/runner/work/KubeArmor/KubeArmor/KubeArmor/core/kubeArmor.go:291 Aug 12 10:53:45 pingu kubearmor[402510]: github.com/kubearmor/KubeArmor/KubeArmor/core.KubeArmor Aug 12 10:53:45 pingu kubearmor[402510]: /home/runner/work/KubeArmor/KubeArmor/KubeArmor/core/kubeArmor.go:547 Aug 12 10:53:45 pingu kubearmor[402510]: main.main Aug 12 10:53:45 pingu kubearmor[402510]: /home/runner/work/KubeArmor/KubeArmor/KubeArmor/main.go:79 Aug 12 10:53:45 pingu kubearmor[402510]: runtime.main Aug 12 10:53:45 pingu kubearmor[402510]: /home/runner/go/pkg/mod/golang.org/toolchain@v0.0.1-go1.21.9.linux-amd64/src/runtime/proc.go:267
libbpf: prog 'enforce_net_connect': BPF program load failed: Permission denied libbpf: prog 'enforce_net_connect': -- BEGIN PROG LOAD LOG -- 0: R1=ctx() R10=fp0 ; LSM_NET(enforce_net_connect, _SOCKET_CONNECT); @ enforcer.bpf.c:437 0: (79) r1 = *(u64 *)(r1 +0) func 'bpf_lsm_socket_connect' arg0 has btf_id 5777 type STRUCT 'socket' 1: R1_w=trusted_ptr_socket() 1: (79) r2 = *(u64 *)(r1 +24) ; R1_w=trusted_ptr_socket() R2_w=trusted_ptr_or_null_sock(id=1) 2: (69) r2 = *(u16 *)(r2 +574) R2 invalid mem access 'trusted_ptr_or_null_' processed 3 insns (limit 1000000) max_states_per_insn 0 total_states 0 peak_states 0 mark_read 0 -- END PROG LOAD LOG -- libbpf: prog 'enforce_net_connect': failed to load: -13 libbpf: failed to load object 'enforcer_bpfel.o' Error: failed to load object file
Expected behavior
KubeArmor should load BPF LSM enforcer.
The text was updated successfully, but these errors were encountered:
cc @daemon1024 @Prateeknandle
Sorry, something went wrong.
Successfully merging a pull request may close this issue.
Bug Report
General Information
Linux pingu 6.10.2-arch1-1 #1 SMP PREEMPT_DYNAMIC Sat, 27 Jul 2024 16:49:55 +0000 x86_64 GNU/Linux
Also seen on FedoraTo Reproduce
Expected behavior
KubeArmor should load BPF LSM enforcer.
The text was updated successfully, but these errors were encountered: