xrdp.service: code=dumped, status =31/SYS #3296

eliassal · 2024-11-01T12:16:55Z

eliassal
Nov 1, 2024

Hi, I have just finished installing a new Fedora 41 VM, when I check the status of xrdp I get

I am not sur which options are empty
Thanks for your help

matt335672 · 2024-11-04T11:57:31Z

matt335672
Nov 4, 2024
Collaborator

@eliassal - I've moved your issue to the right repository and converted it to a discussion as you haven't filled in the issue form.

I've just installed a Fedora 41 workstation VM with xrdp.

I get:-

$ sudo systemctl status xrdp
● xrdp.service - xrdp daemon
     Loaded: loaded (/usr/lib/systemd/system/xrdp.service; enabled; preset: disabled)
    Drop-In: /usr/lib/systemd/system/service.d
             └─10-timeout-abort.conf
     Active: active (running) since Mon 2024-11-04 11:39:08 GMT; 3min 50s ago
 Invocation: ddc6d7164aa940e69688f039fb1dcae5
       Docs: man:xrdp(8)
             man:xrdp.ini(5)
   Main PID: 1065 (xrdp)
      Tasks: 1 (limit: 4643)
     Memory: 2.2M (peak: 2.4M)
        CPU: 8ms
     CGroup: /system.slice/xrdp.service
             └─1065 /usr/sbin/xrdp --nodaemon

Nov 04 11:39:08 fedora41 systemd[1]: Starting xrdp.service - xrdp daemon...
Nov 04 11:39:08 fedora41 (xrdp)[1065]: xrdp.service: Referenced but unset environment variable evaluates to an empty string: XRDP_OPTIONS
Nov 04 11:39:08 fedora41 xrdp[1065]: [INFO ] starting xrdp with pid 1065
Nov 04 11:39:08 fedora41 systemd[1]: Started xrdp.service - xrdp daemon.
Nov 04 11:39:08 fedora41 xrdp[1065]: [INFO ] address [0.0.0.0] port [3389] mode 1
Nov 04 11:39:08 fedora41 xrdp[1065]: [INFO ] listening to port 3389 on 0.0.0.0
Nov 04 11:39:08 fedora41 xrdp[1065]: [INFO ] xrdp_listen_pp done

The message regarding XRDP_OPTIONS is because it is referenced in /usr/lib/systemd/system/xrdp.service but not defined. This is fine. You can remove the warning by editing /etc/sysconfig/xrdp and uncommenting the XRDP_OPTIONS definition.

Your problem is somewhat more concerning. The 31/SYS message indicates that xrdp is trying to access a part of the kernel which it does not have access to. This is a security feature added for #2697

what do you get for sudo journalctl | grep 'sig=31'?

0 replies

eliassal · 2024-11-04T12:31:42Z

eliassal
Nov 4, 2024
Author

Thanks, I uncommented XRDP_OPTIONS, rebooted the machine but still failing.

Here is the output of the command

sudo journalctl | grep 'sig=31'

Nov 01 10:37:18 demosfedora41 audit[3116]: SECCOMP auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 pid=3116 comm="xrdp" exe="/usr/sbin/xrdp" sig=31 arch=40000003 syscall=45 compat=1 ip=0xf7efd637 code=0x0
Nov 01 10:37:18 demosfedora41 audit[3116]: ANOM_ABEND auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 pid=3116 comm="xrdp" exe="/usr/sbin/xrdp" sig=31 res=1
Nov 01 12:01:05 demosfedora41 audit[974]: SECCOMP auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 pid=974 comm="xrdp" exe="/usr/sbin/xrdp" sig=31 arch=40000003 syscall=45 compat=1 ip=0xf7f82637 code=0x0
Nov 01 12:01:05 demosfedora41 audit[974]: ANOM_ABEND auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 pid=974 comm="xrdp" exe="/usr/sbin/xrdp" sig=31 res=1
Nov 01 13:10:31 demosfedora41 audit[1000]: SECCOMP auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 pid=1000 comm="xrdp" exe="/usr/sbin/xrdp" sig=31 arch=40000003 syscall=45 compat=1 ip=0xf7f74637 code=0x0
Nov 01 13:10:31 demosfedora41 audit[1000]: ANOM_ABEND auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 pid=1000 comm="xrdp" exe="/usr/sbin/xrdp" sig=31 res=1
Nov 01 13:12:22 demosfedora41 audit[1253]: SECCOMP auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 pid=1253 comm="xrdp" exe="/usr/sbin/xrdp" sig=31 arch=40000003 syscall=45 compat=1 ip=0xf7efe637 code=0x0
Nov 01 13:12:22 demosfedora41 audit[1253]: ANOM_ABEND auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 pid=1253 comm="xrdp" exe="/usr/sbin/xrdp" sig=31 res=1
Nov 01 13:21:41 demosfedora41 audit[2323]: SECCOMP auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 pid=2323 comm="xrdp" exe="/usr/sbin/xrdp" sig=31 arch=40000003 syscall=45 compat=1 ip=0xf7fb8637 code=0x0
Nov 01 13:21:41 demosfedora41 audit[2323]: ANOM_ABEND auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 pid=2323 comm="xrdp" exe="/usr/sbin/xrdp" sig=31 res=1
Nov 02 10:35:07 demosfedora41 audit[967]: SECCOMP auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 pid=967 comm="xrdp" exe="/usr/sbin/xrdp" sig=31 arch=40000003 syscall=45 compat=1 ip=0xf7fdf637 code=0x0
Nov 02 10:35:07 demosfedora41 audit[967]: ANOM_ABEND auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 pid=967 comm="xrdp" exe="/usr/sbin/xrdp" sig=31 res=1
Nov 02 11:16:02 demosfedora41 audit[996]: SECCOMP auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 pid=996 comm="xrdp" exe="/usr/sbin/xrdp" sig=31 arch=40000003 syscall=45 compat=1 ip=0xf7f03637 code=0x0
Nov 02 11:16:02 demosfedora41 audit[996]: ANOM_ABEND auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 pid=996 comm="xrdp" exe="/usr/sbin/xrdp" sig=31 res=1
Nov 02 12:33:33 demosfedora41 audit[966]: SECCOMP auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 pid=966 comm="xrdp" exe="/usr/sbin/xrdp" sig=31 arch=40000003 syscall=45 compat=1 ip=0xf7efe637 code=0x0
Nov 02 12:33:33 demosfedora41 audit[966]: ANOM_ABEND auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 pid=966 comm="xrdp" exe="/usr/sbin/xrdp" sig=31 res=1
Nov 02 13:01:33 demosfedora41 audit[945]: SECCOMP auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 pid=945 comm="xrdp" exe="/usr/sbin/xrdp" sig=31 arch=40000003 syscall=45 compat=1 ip=0xf7f14637 code=0x0
Nov 02 13:01:33 demosfedora41 audit[945]: ANOM_ABEND auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 pid=945 comm="xrdp" exe="/usr/sbin/xrdp" sig=31 res=1
Nov 02 17:57:00 demosfedora41 audit[969]: SECCOMP auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 pid=969 comm="xrdp" exe="/usr/sbin/xrdp" sig=31 arch=40000003 syscall=45 compat=1 ip=0xf7f33637 code=0x0
Nov 02 17:57:00 demosfedora41 audit[969]: ANOM_ABEND auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 pid=969 comm="xrdp" exe="/usr/sbin/xrdp" sig=31 res=1
Nov 02 18:11:00 demosfedora41 audit[966]: SECCOMP auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 pid=966 comm="xrdp" exe="/usr/sbin/xrdp" sig=31 arch=40000003 syscall=45 compat=1 ip=0xf7fa8637 code=0x0
Nov 02 18:11:00 demosfedora41 audit[966]: ANOM_ABEND auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 pid=966 comm="xrdp" exe="/usr/sbin/xrdp" sig=31 res=1
Nov 02 18:17:40 demosfedora41 audit[942]: SECCOMP auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 pid=942 comm="xrdp" exe="/usr/sbin/xrdp" sig=31 arch=40000003 syscall=45 compat=1 ip=0xf7fa6637 code=0x0
Nov 02 18:17:40 demosfedora41 audit[942]: ANOM_ABEND auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 pid=942 comm="xrdp" exe="/usr/sbin/xrdp" sig=31 res=1
Nov 04 13:17:02 demosfedora41 audit[922]: SECCOMP auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 pid=922 comm="xrdp" exe="/usr/sbin/xrdp" sig=31 arch=40000003 syscall=45 compat=1 ip=0xf7f5d637 code=0x0
Nov 04 13:17:02 demosfedora41 audit[922]: ANOM_ABEND auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 pid=922 comm="xrdp" exe="/usr/sbin/xrdp" sig=31 res=1

0 replies

matt335672 · 2024-11-04T13:43:14Z

matt335672
Nov 4, 2024
Collaborator

Thanks

syscall=45 translates to recvfrom:-

$ scmp_sys_resolver 45
recvfrom

According to systemd-analyze syscall-filter, recvfrom is in the set @network-io, and that is in @system-service. That's how xrdp should be configured.

What do you get for systemctl cat xrdp.service?

0 replies

eliassal · 2024-11-04T15:00:10Z

eliassal
Nov 4, 2024
Author

Not sure I understand what I should do with the command scmp_sys_resolver 45 !

Here is the content for xrdp service

# /usr/lib/systemd/system/xrdp.service
[Unit]
Description=xrdp daemon
Documentation=man:xrdp(8) man:xrdp.ini(5)
Requires=xrdp-sesman.service
After=network-online.target xrdp-sesman.service

[Service]
Type=exec
EnvironmentFile=-/etc/sysconfig/xrdp
EnvironmentFile=-/etc/default/xrdp
ExecStart=/usr/sbin/xrdp $XRDP_OPTIONS --nodaemon
SystemCallArchitectures=native
SystemCallFilter=@system-service

[Install]
WantedBy=multi-user.target

# /usr/lib/systemd/system/service.d/10-timeout-abort.conf
# This file is part of the systemd package.
# See https://fedoraproject.org/wiki/Changes/Shorter_Shutdown_Timer.
#
# To facilitate debugging when a service fails to stop cleanly,
# TimeoutStopFailureMode=abort is set to "crash" services that fail to stop in
# the time allotted. This will cause the service to be terminated with SIGABRT
# and a coredump to be generated.
#
# To undo this configuration change, create a mask file:
#   sudo mkdir -p /etc/systemd/system/service.d
#   sudo ln -sv /dev/null /etc/systemd/system/service.d/10-timeout-abort.conf

[Service]
TimeoutStopFailureMode=abort

0 replies

matt335672 · 2024-11-04T16:57:13Z

matt335672
Nov 4, 2024
Collaborator

The scmp_sys_resolver command just translates the syscall= number into the name of the service.

This is a mystery. According to xrdp.service, xrdp is allowed to use the recvfrom call, but the kernel disagrees.

Have you rebooted, or tried sudo systemctl daemon-reload?

0 replies

eliassal · 2024-11-04T18:13:17Z

eliassal
Nov 4, 2024
Author

I have rebooted so many times

0 replies

matt335672 · 2024-11-05T13:13:11Z

matt335672
Nov 5, 2024
Collaborator

OK - thanks for clarifying that.

There's a mismatch between my system and yours, clearly. Let's try to attack this from both ends.

What do you get on your system for scmp_sys_resolver 45? You may need to install the libseccomp-devel package if it isn't already installed. Maybe on your system this maps to another system service.
Have you made any changes as all to xrdp.ini? If so, please can you post the entire file, so I can try to reproduce your problem here.

0 replies

eliassal · 2024-11-05T14:35:35Z

eliassal
Nov 5, 2024
Author

HI, here is the output for scmp_sys_resolver 45

I have touched nothing, this is a fresh new fedora 41 with xfce image install (downloaded from fedora downloads), enclosed the file (I changed ini to txt) so I can upload it
xrdp.txt

0 replies

matt335672 · 2024-11-05T19:49:37Z

matt335672
Nov 5, 2024
Collaborator

That all looks fine.

The only difference in your file is that the [Xorg] stanza is uncommented in yours. I've uncommented mine, installed xorgxrdp, and I'm still having no problems.

I've just done a dnf update, and all is still well. Can you do the same, and then post your package list with rpm -qa | sort ?

0 replies

matt335672 · 2024-11-05T19:51:20Z

matt335672
Nov 5, 2024
Collaborator

Also, at what stage does xrdp fail? Does it fail immediately on running?

0 replies

eliassal · 2024-11-06T10:33:08Z

eliassal
Nov 6, 2024
Author

It fails right away. I did install xorgxrdp restarted the VM getting same behavior

Tell me please, did you install the same Fedora 41 with xfce?
Here is the package list file.
packageList.txt

0 replies

matt335672 · 2024-11-07T15:52:23Z

matt335672
Nov 7, 2024
Collaborator

No, I didn't install the xfce version.

I think I've found the problem however.

In your package list:-

xrdp-0.10.1-1.fc41.i686

You've got the 32-bit version of xrdp installed on a 64-bit system.

I've just installed the 32-bit version of xrdp on my system and I can reproduce the fault.

Try removing it and installing the 64-bit package (i.e.):-

sudo dnf remove xrdp.i686
sudo dnf install xrdp.x86_64
sudo systemctl enable --now xrdp
systemctl status xrdp

0 replies

eliassal · 2024-11-07T18:49:12Z

eliassal
Nov 7, 2024
Author

Correct, fantatstic, you are really the man to ask. Now xrdp is active and not failing but when I try to RDP I get a black screen and then disconnects right away.
I uncommented xorg in xrdp.ini, when I try to RDP I get first

Then in a 2nd screen, I eneter my password

and get disconnected right away

0 replies

eliassal · 2024-11-07T19:12:21Z

eliassal
Nov 7, 2024
Author

Hurray, I had a session connected directly within hyper-v since I was not able to RDP. I closed it and all of a sudden I was able to RDP to the machine.
Sop does this mean that I cant have 2 sessions, one direct one RDP?
So many thanks for your help

0 replies

matt335672 · 2024-11-08T11:15:24Z

matt335672
Nov 8, 2024
Collaborator

With systemd-based distros you can't have more than one graphical session per user logged in at once. This is covered in the FAQ

The simplest workaround is to use a different user for RDP-based sessions.

0 replies

eliassal · 2024-11-08T11:38:48Z

eliassal
Nov 8, 2024
Author

Thanks matt for the explanation. Last thing, yesterday when I RDPed I was able to copy/paste from/to VM to my host but this stopped this morninng nothing happens in the 2 ways. What might happened? I use mobaxterm to RDP

0 replies

matt335672 · 2024-11-08T12:07:03Z

matt335672
Nov 8, 2024
Collaborator

A couple of possibilities:-

There's a problem at the moment where if you've already got a client connected from one location, and you connect another one, the session handover doesn't work correctly. That might be it.
cut/paste is handled by the xrdp-chansrv process running in the user session. Check that's still running.

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

xrdp.service: code=dumped, status =31/SYS #3296

{{title}}

Replies: 17 comments

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{title}}

{{title}}

Select a reply

xrdp.service: code=dumped, status =31/SYS #3296

eliassal Nov 1, 2024

Replies: 17 comments

matt335672 Nov 4, 2024 Collaborator

eliassal Nov 4, 2024 Author

matt335672 Nov 4, 2024 Collaborator

eliassal Nov 4, 2024 Author

matt335672 Nov 4, 2024 Collaborator

eliassal Nov 4, 2024 Author

matt335672 Nov 5, 2024 Collaborator

eliassal Nov 5, 2024 Author

matt335672 Nov 5, 2024 Collaborator

matt335672 Nov 5, 2024 Collaborator

eliassal Nov 6, 2024 Author

matt335672 Nov 7, 2024 Collaborator

eliassal Nov 7, 2024 Author

eliassal Nov 7, 2024 Author

matt335672 Nov 8, 2024 Collaborator

eliassal Nov 8, 2024 Author

matt335672 Nov 8, 2024 Collaborator

eliassal
Nov 1, 2024

matt335672
Nov 4, 2024
Collaborator

eliassal
Nov 4, 2024
Author

matt335672
Nov 4, 2024
Collaborator

eliassal
Nov 4, 2024
Author

matt335672
Nov 4, 2024
Collaborator

eliassal
Nov 4, 2024
Author

matt335672
Nov 5, 2024
Collaborator

eliassal
Nov 5, 2024
Author

matt335672
Nov 5, 2024
Collaborator

matt335672
Nov 5, 2024
Collaborator

eliassal
Nov 6, 2024
Author

matt335672
Nov 7, 2024
Collaborator

eliassal
Nov 7, 2024
Author

eliassal
Nov 7, 2024
Author

matt335672
Nov 8, 2024
Collaborator

eliassal
Nov 8, 2024
Author

matt335672
Nov 8, 2024
Collaborator