Broken openat syscall in Sandbox mode
My version is 0.3.3.2-alpha (git-7b1d356bdb76607d). If relevant, I am running under Debian buster/sid amd64 KVM VPS with a 4.14.24 kernel patched with grsecurity, and AppArmor enabled. ``` Mar 06 10:14:36.024 [notice] Tor 0.3.3.2-alpha (git-7b1d356bdb76607d) running on Linux with Libevent 2.1.8-stable, OpenSSL 1.1.0g, Zlib 1.2.8, Liblzma 5.2.2, and Libzstd 1.3.3. Mar 06 10:14:36.025 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning Mar 06 10:14:36.025 [notice] This version is not a stable Tor release. Expect more bugs than usual. Mar 06 10:14:36.025 [notice] Read configuration file "/etc/tor/torrc". Mar 06 10:14:36.029 [notice] Scheduler type KIST has been enabled. Mar 06 10:14:36.029 [notice] Opening Socks listener on 127.0.0.1:9050 Mar 06 10:14:36.029 [notice] Opening DNS listener on 127.0.0.1:5353 Mar 06 10:14:36.029 [notice] Opening Transparent pf/netfilter listener on 127.0.0.1:9040 Mar 06 10:14:36.029 [notice] Opening Control listener on 127.0.0.1:9051 ============================================================ T= 1520360077 (Sandbox) Caught a bad syscall attempt (syscall openat) tor(+0x1a57ea)[0x20b99917ea] /lib/x86_64-linux-gnu/libpthread.so.0(open64+0x4b)[0x38f248203ab] /lib/x86_64-linux-gnu/libpthread.so.0(open64+0x4b)[0x38f248203ab] tor(tor_open_cloexec+0x40)[0x20b9977a00] tor(start_writing_to_file+0x17a)[0x20b998b2ea] tor(+0x19f3cb)[0x20b998b3cb] tor(+0x19f518)[0x20b998b518] tor(or_state_save+0x15b)[0x20b98aa27b] tor(+0x5488b)[0x20b984088b] /usr/lib/x86_64-linux-gnu/libevent-2.1.so.6(+0x229ba)[0x38f25cbe9ba] /usr/lib/x86_64-linux-gnu/libevent-2.1.so.6(event_base_loop+0x5a7)[0x38f25cbf537] tor(do_main_loop+0x2b4)[0x20b9841604] tor(tor_run_main+0x1025)[0x20b9843ad5] tor(tor_main+0x3a)[0x20b983c09a] tor(main+0x19)[0x20b983be29] /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xe7)[0x38f24272a87] tor(_start+0x2a)[0x20b983be7a] ``` It is possible this error is either due to Tor, or it could be security hardening applied to my server. Let me know in any case... Could commit ea8e9f17f52877cc795f1792acb81d7fdaff6baf be relevant? **Trac**: **Username**: ageisp0lis
issue