Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-5776

lsof loses ability to resolve protocol types in certain environments (unknown protocol for IPv4 sockets)

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Normal Normal
    • None
    • rhel-9.0.0, rhel-10.0
    • lsof
    • None
    • None
    • rhel-plumbers
    • ssg_core_services
    • 5
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • If docs needed, set a value
    • None
    • 57,005

      Description of problem:
      When I execute lsof on some systems, it doesn't report that certain file descriptors are sockets and what types of sockets (all are reported "unknown"), on others it works as expected.

      Version-Release number of selected component (if applicable):
      lsof-4.94.0-3.el9.x86_64

      How reproducible:
      when it happens, it's fully reproducible, but not on all systems

      Steps to Reproduce:
      1. provision machine in 1minutetip
      2. ps aux | grep sshd
      3. lsof -w -b -p $sshd_pid

      Actual results:
      COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
      sshd 3456 root cwd unknown /
      sshd 3456 root rtd unknown /
      sshd 3456 root txt unknown /usr/sbin/sshd
      sshd 3456 root mem REG 253,1 6753911 /usr/sbin/sshd
      sshd 3456 root mem REG 253,1 6522798 /usr/lib64/libnss_systemd.so.2
      sshd 3456 root mem REG 253,1 6709939 /usr/lib64/libnss_sss.so.2
      sshd 3456 root mem REG 253,1 4759913 /usr/lib64/security/pam_lastlog.so
      ...
      sshd 3456 root mem REG 253,1 6394687 /usr/lib64/ld-linux-x86-64.so.2
      sshd 3456 root mem REG 0,20 19 /sys/fs/selinux/status
      sshd 3456 root 0 unknown /dev/null
      sshd 3456 root 1 unknown /dev/null
      sshd 3456 root 2 unknown /dev/null
      sshd 3456 root 3 unknown socket
      sshd 3456 root 4 unknown socket
      sshd 3456 root 5 unknown /dev/ptmx
      sshd 3456 root 6 unknown socket
      sshd 3456 root 7 unknown /run/systemd/sessions/3.ref
      sshd 3456 root 8 unknown socket

      Expected results:
      COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
      sshd 6164 root cwd DIR 253,1 4096 2 /
      sshd 6164 root rtd DIR 253,1 4096 2 /
      sshd 6164 root txt REG 253,1 952568 3937467 /usr/sbin/sshd
      sshd 6164 root mem REG 253,1 6940392 1445554 /var/lib/sss/mc/group
      ...
      sshd 6164 root mem REG 253,1 135256 3995397 /usr/lib64/libaudit.so.1.0.0
      sshd 6164 root mem REG 253,1 843032 3937850 /usr/lib64/ld-2.33.so
      sshd 6164 root 0r CHR 1,3 0t0 4 /dev/null
      sshd 6164 root 1u unix 0x0000000090427bf4 0t0 45521 type=STREAM (CONNECTED)
      sshd 6164 root 2u unix 0x0000000090427bf4 0t0 45521 type=STREAM (CONNECTED)
      sshd 6164 root 3r REG 253,1 9253600 1445549 /var/lib/sss/mc/passwd
      sshd 6164 root 4u unix 0x00000000967d618d 0t0 38647 type=STREAM (CONNECTED)
      sshd 6164 root 5u IPv4 45537 0t0 TCP *:ssh (LISTEN)
      sshd 6164 root 6r REG 253,1 6940392 1445554 /var/lib/sss/mc/group
      sshd 6164 root 7u IPv6 45539 0t0 TCP *:ssh (LISTEN)

      Additional info:

              jrybar@redhat.com Jan Rybar
              hkario@redhat.com Alicja Kario
              Jan Rybar Jan Rybar
              RHEL CS Plumbers QE Bot RHEL CS Plumbers QE Bot
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated: