Ipsec_starter[xxx]: notifying watcher failed: Bad file descriptor

charliem

I noticed (4) of these errors are logged in system.log every time IPsec is started or 'forcefully reloaded'. This is new since pfsense updated to strongswan 5.2 from 5.1.3

The cause and fix are discussed in this ML message: https://lists.strongswan.org/pipermail/users/2014-July/006293.html and additional details are in the surrounding ML thread.

One fix is this:

diff --git a/src/starter/starter.c b/src/starter/starter.c
index ef57808..71f33ae 100644
--- a/src/starter/starter.c
+++ b/src/starter/starter.c
@@ -612,7 +612,6 @@ int main (int argc, char **argv)
                                int fnull;

                                close_log();
-                               closefrom(3);

                                fnull = open("/dev/null", O_RDWR);
                                if (fnull >= 0)

eri--

I do not see any issues from that log setting.
Due you have any problems in general or just trying to clean your log?

charliem

No problems related to that, just noise in the log. I can understand you not wanting to patch strongswan, no problem, but it could generate some questions when 2.2 goes GA.

charliem

Bug now opened here:

https://redmine.pfsense.org/issues/3947

charliem

@charliem:

Bug now opened here:

https://redmine.pfsense.org/issues/3947

This is fixed by today's snapshot with strongswan updated to 5.2.1. Thanks!