Re: problems with libnetfilter_conntrack / cntl_test

["Paweł Sikora" <pluto@agmk.net>]

Dnia czwartek, 17 listopada 2005 02:38, Pablo Neira napisał:
> Paweł Sikora wrote:
> > Dnia środa, 16 listopada 2005 16:44, napisałeś:
> >>Pawel Sikora wrote:
> >>>I have installed a 2.6.14.2 kernel + grsecurity-2.1.7-2.6.14.2-$latest,
> >>>libnfnetlink-0.0.13 and libnetfilter_conntrack-0.0.28.
> >>>
> >>>./ctnl_test fails:
> >>>
> >>>Test for libnetfilter_conntrack
> >>>
> >>>NFNETLINK answers: Invalid argument
> >>>TEST 1: create conntrack (-22)
> >>>TEST 2: dump conntrack table and reset (-22)
> >>>TEST 3: dump conntrack table (-22)
> >>>TEST 4: get conntrack (-22)
> >>>TEST 5: update conntrack (-22)
> >>>NFNETLINK answers: Invalid argument
> >>>TEST 6: delete conntrack (-22)
> >>>nfnl_open: bind(netlink): Operation not permitted
> >>>Can't open handler
> >>>Test failed with error -2. Errors=7
> >>>
> >>>Is this a grsec issue?
> >>
> >>Hard to say, my last contact with grsec was years ago. That output is
> >>kind of weird. Could you try reverting the grsec patch?
> >
> > currently I get the same error on 2.6.14.2 without grsec on root account.
> > first failure occurs at first call of nfnl_talk().
>
> There's nothing wrong in nfnl_talk. It is the kernel that is returning
> -EINVAL to userspace. (...)

sorry for the noise, /me is brainless :)
`modprobe ip_conntrack_netlink` solved problem.

-- 
The only thing necessary for the triumph of evil
  is for good men to do nothing.
                                           - Edmund Burke