Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Transmission : The default 'seccomp' has wrong config for the 'done' external script excution that make crash/killed #25722

Open
mic-user opened this issue Jan 12, 2025 · 2 comments

Comments

@mic-user
Copy link

mic-user commented Jan 12, 2025

Maintainer: @kolacinskikarol @dangowrt
Environment: mvebu / cortexa9 - Marvell Armada 385 88F6820 / Linksys WRT32X / 24.10.0-rc5

Description:
The feature 'Script torrent done filename' not working which automatically run a custom script when a torrent download finished. Also not a permission problem since it runs with root:root. It wasnt a problem with OpenwWRT 19.7.10's transmission

Symptom :
When the moment to run the script(which means right after download completed),
transmission's rpc connection disconnected while 'transmission remote ui' on windows is connected.
And seem no crashs since the process still there.
The package doing something else rather than run the script(or fail to run a script by whatever reason).

The OpenWRT image generated by firmware selector
factory:
sysupgrade:

@lbernstone
Copy link

I'm guessing this is due to the script not being allowed in the procd jail. Anybody know what needs to be opened up to allow that script (which will be available as part of the uci info) to fork a new process?

@mic-user
Copy link
Author

mic-user commented Jan 26, 2025

@lbernstone You talking about '/etc/seccomp/transmission-daemon.json' ? Damn, found it.
Commenting below in the init.d script show no problem. no crash like symptom.
`

seccomp_path="/etc/seccomp/transmission-daemon.json"
#if [ -f "$seccomp_path" ]; then
#- procd _set_param seccomp "$seccomp_path"
#fi
`

Then, how to find the which call should be add into the seccomp file for normal working and precise security matter?

@mic-user mic-user changed the title Transmission : Custom 'done' script never runs. Transmission : The default 'seccomp' has wrong config for the 'done' external script excution Jan 26, 2025
@mic-user mic-user changed the title Transmission : The default 'seccomp' has wrong config for the 'done' external script excution Transmission : The default 'seccomp' has wrong config for the 'done' external script excution that make crash/killed Jan 26, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants