[SailfishDevel] Avahi error opening socket

Slava Monich slava.monich at jolla.com
Mon Jan 22 09:14:39 UTC 2018


Hi Michael,

If you ssh into the phone directly as root, try logging in as nemo first 
and become root via devel-su. There should be no difference but there is 
one (hint: id -a).

Cheers,
-Slava

> Thanks, Lukas, but it didn't help
>
> getcap /usr/sbin/avahi-daemon
> /usr/sbin/avahi-daemon = cap_net_raw+ep
>
> Log entries of avahi-daemon:
>
> avahi-daemon[10662]: Found user 'avahi' (UID 993) and group 'avahi' (GID 988).
> avahi-daemon[10662]: Successfully dropped root privileges.
> avahi-daemon[10662]: avahi-daemon 0.7 starting up.
> systemd[1]: Started Avahi mDNS/DNS-SD Stack.
> avahi-daemon[10662]: Loading service file /etc/avahi/services/sftp-ssh.service.
> avahi-daemon[10662]: Loading service file /etc/avahi/services/ssh.service.
> avahi-daemon[10662]: socket() failed: Permission denied
> systemd[1]: avahi-daemon.service: Main process exited, code=exited,
> status=255/n/a
> systemd[1]: avahi-daemon.service: Unit entered failed state.
> systemd[1]: avahi-daemon.service: Failed with result 'exit-code'.
>
>
> On Donnerstag, 18. Jänner 2018 18:50:10 CET Lukáš Karas wrote:
>> Just guessing, don't need Avahi open raw socket?
>> Try to add capability CAP_NET_RAW to your avahi binary.
>>
>> sudo setcap cap_net_raw+p /path/to/avahi
>>
>> Lukas
>>
>> Dne čtvrtek 18. ledna 2018 16:53:03 CET Michael Fuchs napsal(a):
>>> Hi,
>>>
>>> I'm trying to use avahi on Sailfish.
>>>
>>> I built it here:
>>>
>>> https://build.merproject.org/package/show/home:fooxl:sailfish/avahi-simple
>>>
>>> In the emulator it runs fine by starting it via systemctl
>>>
>>> # systemctl start avahi-daemon
>>>
>>> The daemon forks and drops its privileges to avahi:avahi.
>>>
>>> But on the device (JollaC) it complains about
>>>
>>>      socket() failed: Permission denied
>>>
>>> If I start it with
>>>
>>> # avahi-daemon --no-drop-root
>>>
>>> as root, it runs also fine on the device.
>>>
>>> Could somebody please give me a hint, how to investigate this issue?
>>>
>>> greetz, Michael.
>>>



More information about the Devel mailing list