Bug#908658: systemd: apt-get upgrade from 239-7 to 239-8 failed

[Michael Biebl]

Am 12.09.18 um 15:25 schrieb kochtopf:

> Sep 12 15:19:05 pi2 systemd-journald[93]: Journal stopped
> -- Logs begin at Wed 2018-09-12 15:06:28 CEST, end at Wed 2018-09-12
> 15:19:05 CEST. --
> -- No entries --
> ● systemd-udevd.service - udev Kernel Device Manager
>    Loaded: loaded (/lib/systemd/system/systemd-udevd.service; static;
> vendor preset: enabled)
>    Active: failed (Result: exit-code) since Wed 2018-09-12 15:19:15
> CEST; 1min 19s ago
>      Docs: man:systemd-udevd.service(8)
>            man:udev(7)
>  Main PID: 1451 (code=exited, status=127)

Your journal log is incomplete, journald was stopped before udevd was
(re)started.
I suspect that there issues with your kernel and the security features
used in the .service file, given that the earlier logs e.g. complain
about missing BPF support.
This is something which needs to be addressed by the raspbian people.

/lib/systemd/system/systemd-udevd.service uses various hardening options:

PrivateMounts=yes
MemoryDenyWriteExecute=yes
RestrictRealtime=yes
RestrictAddressFamilies=AF_UNIX AF_NETLINK AF_INET AF_INET6
SystemCallArchitectures=native
LockPersonality=yes
IPAddressDeny=any

I would comment them out, one by one, run systemctl daemon-reload and
try to restart systemd-udevd.
-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-systemd-maintainers/attachments/20180912/5f5a6693/attachment-0002.sig>