I dug some more. This is just getting better, look: root@Delta:~# lsof /dev/urandom lsof: WARNING: can't stat() fuse.gvfs-fuse-daemon file system /home/gebruiker/.gvfs Output information may be incomplete. COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME smbd 2714 root 4r CHR 1,9 0t0 268 /dev/urandom cupsd 2768 root 7r CHR 1,9 0t0 268 /dev/urandom smbd 2797 root 4r CHR 1,9 0t0 268 /dev/urandom xfce4-ses 3045 gebruiker 13r CHR 1,9 0t0 268 /dev/urandom xfce4-mai 3077 gebruiker 6r CHR 1,9 0t0 268 /dev/urandom charon 21021 root 11r CHR 1,9 0t0 268 /dev/urandom charon 21021 root 12r CHR 1,9 0t0 268 /dev/urandom chromium- 22123 gebruiker 27r CHR 1,9 0t0 268 /dev/urandom chromium- 22128 gebruiker 9r CHR 1,9 0t0 268 /dev/urandom chromium- 22158 gebruiker 9r CHR 1,9 0t0 268 /dev/urandom chromium- 22184 gebruiker 9r CHR 1,9 0t0 268 /dev/urandom charon 22395 root 11r CHR 1,9 0t0 268 /dev/urandom charon 22395 root 12r CHR 1,9 0t0 268 /dev/urandom
Charon is listed while having urandom opened! So I did a strace (including forks this time!) to see what charon is actually doing, it fails on this (I attached the full trace): [pid 22519] open("/dev/urandom", O_RDONLY) = -1 EACCES (Permission denied) Which crazy since: root@Delta:~# ps -p 21021,22515,21020,22514 -o args,group,pgid,ppid,rgroup,ruser,tty,user,gid,rgid,ruid,uid COMMAND GROUP PGID PPID RGROUP RUSER TT USER GID RGID RUID UID /usr/lib/ipsec/starter root 21020 1 root root ? root 0 0 0 0 /usr/lib/ipsec/charon --use root 21021 21020 root root ? root 0 0 0 0 /usr/lib/ipsec/starter root 22514 1 root root ? root 0 0 0 0 /usr/lib/ipsec/charon --use root 22515 22514 root root ? root 0 0 0 0 ** Attachment added: "Strace -f of starter" https://bugs.launchpad.net/ubuntu/+source/strongswan/+bug/1014361/+attachment/3195638/+files/starter_strace -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1014361 Title: Strongswan fails to access /dev/urandom To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/strongswan/+bug/1014361/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs