{"action":"created","issue":{"url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/2227","repository_url":"https://api.github.com/repos/QubesOS/qubes-issues","labels_url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/2227/labels{/name}","comments_url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/2227/comments","events_url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/2227/events","html_url":"https://github.com/QubesOS/qubes-issues/issues/2227","id":169448748,"number":2227,"title":"Weird race condition that makes DNS ProxyVM rules disappear","user":{"login":"Rudd-O","id":346306,"avatar_url":"https://avatars.githubusercontent.com/u/346306?v=3","gravatar_id":"","url":"https://api.github.com/users/Rudd-O","html_url":"https://github.com/Rudd-O","followers_url":"https://api.github.com/users/Rudd-O/followers","following_url":"https://api.github.com/users/Rudd-O/following{/other_user}","gists_url":"https://api.github.com/users/Rudd-O/gists{/gist_id}","starred_url":"https://api.github.com/users/Rudd-O/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Rudd-O/subscriptions","organizations_url":"https://api.github.com/users/Rudd-O/orgs","repos_url":"https://api.github.com/users/Rudd-O/repos","events_url":"https://api.github.com/users/Rudd-O/events{/privacy}","received_events_url":"https://api.github.com/users/Rudd-O/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2016-08-04T19:00:41Z","updated_at":"2016-08-04T22:06:32Z","closed_at":null,"body":"Qubes 3.2.  Fedora 23 minimal template.\r\n\r\nI haven't traced the cause, but from time to time (usually after starting the second VM attached to a particular ProxyVM) the PR-QBS rules disappear.\r\n\r\nRunning /usr/lib/qubes/init/network-proxy-setup.sh in the ProxyVM restores them.\r\n\r\nWhat could it be?\r\n\r\nIs there any logging service where events that alter these rules get collected?  Should there be?  I think there should be."},"comment":{"url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/comments/237698089","html_url":"https://github.com/QubesOS/qubes-issues/issues/2227#issuecomment-237698089","issue_url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/2227","id":237698089,"user":{"login":"marmarek","id":726704,"avatar_url":"https://avatars.githubusercontent.com/u/726704?v=3","gravatar_id":"","url":"https://api.github.com/users/marmarek","html_url":"https://github.com/marmarek","followers_url":"https://api.github.com/users/marmarek/followers","following_url":"https://api.github.com/users/marmarek/following{/other_user}","gists_url":"https://api.github.com/users/marmarek/gists{/gist_id}","starred_url":"https://api.github.com/users/marmarek/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/marmarek/subscriptions","organizations_url":"https://api.github.com/users/marmarek/orgs","repos_url":"https://api.github.com/users/marmarek/repos","events_url":"https://api.github.com/users/marmarek/events{/privacy}","received_events_url":"https://api.github.com/users/marmarek/received_events","type":"User","site_admin":false},"created_at":"2016-08-04T22:06:32Z","updated_at":"2016-08-04T22:06:32Z","body":"Fedora by default enables auditing, which include all iptables\nmodifications. Like this:\n\n```\n[1521334.325092] audit: type=1325 audit(1470348234.636:43327):\ntable=filter family=2 entries=14\n[1521334.325198] audit: type=1300 audit(1470348234.636:43327):\narch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40\na3=55b7c9ab5fc0 items=0 ppid=27222 pid=27256 auid=4294967295 uid=0 gid=0\neuid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts8 ses=4294967295\ncomm=\"iptables\" exe=\"/usr/sbin/xtables-multi\" key=(null)\n[1521334.325272] audit: type=1327 audit(1470348234.636:43327):\nproctitle=69707461626C6573002D41004F5554505554002D6A00414343455054\n```\n\nThere are also events of service start/stop, so it should be possible to\ntrace it this way, at least in theory.\n\n-- \nBest Regards,\nMarek Marczykowski-Górecki\nInvisible Things Lab\nA: Because it messes up the order in which people normally read text.\nQ: Why is top-posting such a bad thing?\n"}}
{"actor":{"display_login":"marmarek"}}