signal handling: virtualization, kernel-to-user info leak
by John Reiser
My user-mode virtualization of signal handling stopped working in FC5.
I figured out why; the details, and a kernel patch, are in:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=180351
The dwarf2 unwind info in the vDSO for rt_sigframe, as well as
the kernel rt_sigreturn() itself, takes a shortcut by referencing the
struct ucontext directly, instead of via the puc pointer. This
means that a thread kill to cancel a pthread_cond_wait causes a
SIGSEGV when unwinding through the virtualized rt_sigframe.
(The virtualized frame copies the four scalars {pretcode, sig,
pinfo, puc} while leaving the full structs behind.)
Returning from virtualized signal handler also gets a SIGSEGV
because the kernel uses the ucontext that it "knows" is there,
instead of accessing it indirectly through the pointer puc.
Somewhat related, the kernel leaks ["garbage"] data from the
kernel stack when placing the struct siginfo onto the user stack.
In arch/i386/kernel/signal.c, subroutine do_signal() declares
an on-stack automatic local
siginfo_t info;
The routine fills in portions without clearing the whole struct,
then copies the entire struct onto the user stack.
It's not cheap to clear (the internal union is
116 bytes long, and uses only about 28 bytes or so),
but isn't this an information security issue?
--
18 years, 2 months
trying to install rawhide
by Erwin Rol
I have been trying to install the current rawhide on a older machine, to
test if it works (my current rawhide machine is just an yum updated
FC4).
But I don't get very far, It boots OK, than i get the language and
keyboard selection. I select US keyboard and than my A and Q and my W
and Y keys are switched, and probably a lot of other keys too.
Ignoring the weird keyboard i select http install, and than get the
Message "Running anaconda, The Fedora System Installer - please wait"
and pretty much directly after that "install exited abnormally" and
there my install adventure is over.
It anybody actually using/testing the install system, or is it just
there for show until the next test release is here ?
- Erwin
18 years, 2 months
beagle in rawhide
by Bart Vanbrabant
Hello,
There are some problems when installing fedora from rawhide and beagle.
I installed fedora two days ago. I also installed beagle and there are
some problems.
The evolution-sharp package isn't installed when installing beagle, is
this a packaging problem?
beagle also needs extended attributes, ext3 supports this but user_xattr
isn't added to partition where the /home directory is placed. This
should be enabled.
g,
Bart
--
Bart Vanbrabant <bart.vanbrabant(a)zoeloelip.be>
PGP fingerprint: 093C BB84 17F6 3AA6 6D5E FC4F 84E1 FED1 E426 64D1
18 years, 2 months
sudo env_reset in FC5
by Karel Zak
Hi,
I'd like to enable the env_reset option in the sudoers config file by
default in FC5:
Defaults env_reset
Defaults env_keep = "COLORS DISPLAY EDITOR HOSTNAME HISTSIZE INPUTRC KDEDIR \
LESSOPEN LS_COLORS MAIL PS1 PS2 QTDIR SSH_ASKPASS USERNAME \
LANG LC_ADDRESS LC_CTYPE LC_COLLATE LC_IDENTIFICATION \
LC_MEASUREMENT LC_MESSAGES LC_MONETARY LC_NAME LC_NUMERIC \
LC_PAPER LC_TELEPHONE LC_TIME LC_ALL LANGUAGE LINGUAS \
_XKB_CHARSET"
Why? The reason is CVE-2005-4158, CVE-2006-0151 and probably a lot of
same bugs in future.
Comments & suggestion?
Karel
--
Karel Zak <kzak(a)redhat.com>
18 years, 2 months
rawhide report: 20060202 changes
by Build System
Removed package sqlite2
Removed package jakarta-commons-discovery
Updated Packages:
GConf2-2.13.5-2
---------------
* Wed Feb 01 2006 Christopher Aillon <caillon(a)redhat.com> 2.13.5-2
- Add patch from Mandriva to reload GConf2 every time a schema is
added or removed (solves bug 173869)
anaconda-10.91.12-1
-------------------
* Thu Feb 02 2006 Jeremy Katz <katzj(a)redhat.com> - 10.91.12-1
- improves %packages section some more (clumens)
- give a better error on kickstart lvm syntax errors (clumens)
- display vncconnect error messages (clumens)
- make swap labels shorter for cciss (dcantrel, #176074)
- Make /dev/root for mkinitrd (#171662)
- Use pirut stuff for graphical group selection
ant-0:1.6.5-1jpp_4fc
--------------------
* Thu Feb 02 2006 Archit Shah <ashah(a)redhat.com> - 0:1.6.5-1jpp_4fc
- build ant without using native code
* Mon Jan 09 2006 Jesse Keating <jkeating(a)redhat.com> - 0:1.6.5-1jpp_3fc
- bump again for another gcj fix
arts-8:1.5.1-1
--------------
* Wed Feb 01 2006 Than Ngo <than(a)redhat.com> 8:1.5.1-1
- 1.5.1
* Wed Jan 18 2006 Than Ngo <than(a)redhat.com> 8:1.5.0-2
- rebuilt with --enable-new-ldflags
* Mon Dec 19 2005 Than Ngo <than(a)redhat.com> 8:1.5.0-1
- apply patch to fix #169631
autofs-1:4.1.4-16.2
-------------------
* Wed Feb 01 2006 Ian Kent <ikent(a)redhat.com> - 1:4.1.4-16.2
- Add more general patch to translate "_" to "." in map names. (bz #147765)
avahi-0.6.6-1
-------------
* Wed Feb 01 2006 Jason Vas Dias <jvdias(a)redhat.com> - 0.6.6-1
- fix bug 179448: mis-alignment of input cmsghdr msg->msg_control buffer on ia64
- Upgrade to 0.6.6
dejagnu-1:1.4.4-5
-----------------
* Thu Feb 02 2006 Petr Machata <pmachata(a)redhat.com> 1:1.4.4-5
- Applying H.J. Lu's race condition patch. (#166000)
f-spot-0.1.8-2
--------------
* Wed Feb 01 2006 Christopher Aillon <caillon(a)redhat.com> - 0.1.8-2
- Add sqlite3.patch to ensure that sqlite3 is used if both
sqlite2 and sqlite3 are installed.
firefox-1.5.0.1-2
-----------------
* Wed Feb 01 2006 Christopher Aillon <caillon(a)redhat.com> - 1.5.0.1-2
- Update language packs to 1.5.0.1
- Add dumpstack.patch
* Wed Feb 01 2006 Christopher Aillon <caillon(a)redhat.com> - 1.5.0.1-1
- Update to 1.5.0.1
freeglut-2.4.0-3
----------------
* Tue Jan 31 2006 Mike A. Harris <mharris(a)redhat.com> 2.4.0-3
- Added "Requires: libGL-devel libGLU-devel" to fix bug (#179464)
- Change file based GL header build dep to BuildRequires: libGL-devel
* Fri Dec 09 2005 Jesse Keating <jkeating(a)redhat.com> 2.4.0-2.1
- rebuilt
* Fri Nov 18 2005 Bill Nottingham <notting(a)redhat.com> 2.4.0-2
- Remove references to obsolete /usr/X11R6 paths
gcc-4.1.0-0.19
--------------
* Wed Feb 01 2006 Jakub Jelinek <jakub(a)redhat.com> 4.1.0-0.19
- s390{,x} long double patch fix for s390x ICEs on test-ldouble
and tst-align2 (Andreas Krebbel)
gjdoc-0.7.7-2
-------------
* Wed Feb 01 2006 Andrew Overholt <overholt(a)redhat.com> 0.7.7-2
- Don't package .la files (rh#172634).
- Install un-versioned symlinks in /usr/share/java (rh#177139).
gnome-menus-2.13.5-4
--------------------
* Wed Feb 01 2006 Ray Strode <rstrode(a)redhat.com> 2.13.5-4
- don't ship upstream Desktop.directory files
indent-2.2.9-11
---------------
* Wed Feb 01 2006 Petr Machata <pmachata(a)redhat.com> 2.2.9-11
- Setting LC_ALL instead of LC_MESSAGES in order to fix output of
KOI8-R characters. (#134044)
initscripts-8.24-1
------------------
* Wed Feb 01 2006 Bill Nottingham <notting(a)redhat.com> 8.24-1
- init.d/functions: fix sendmail startup
- sysconfig.txt: fix typos (<mitr(a)redhat.com>)
kdebase-6:3.5.1-1
-----------------
* Wed Feb 01 2006 Than Ngo <than(a)redhat.com> 6:3.5.1-1
- 3.5.1
- apply patch to fix kded segfaults for audio/blank cd's
- get rid some of unneeded patches
- add buildrequires on libxkbfile-devel
* Thu Jan 26 2006 Than Ngo <than(a)redhat.com> 6:3.5.0-3
- add BuildPrereq on dbus-devel >= 0.60, hal-devel >= 0.5
kdelibs-6:3.5.1-1
-----------------
* Wed Feb 01 2006 Than Ngo <than(a)redhat.com> 6:3.5.1-1
- 3.5.1
* Thu Jan 19 2006 Than Ngo <than(a)redhat.com> 6:3.5.0-6
- rename subpackage to -apidocs
kernel-2.6.15-1.1895_FC5
------------------------
* Wed Feb 01 2006 Dave Jones <<davej(a)redhat.com>
- Woo, 2.6.16rc1-git5 (at last)
- Enable exec* checking except for execmod for ppc32 and ia64 (#178747)
- Disable a bunch of drivers for SBC's that won't run Fedora.
- Reenable building of firmware for QLogic HBA's.
- Add a bunch of missing newlines & the like to module init's.
- Fix up broken DVB kobject use.
- Fixed an oops in the stradis driver initialisation.
- Happy Birthday to "The Yellow Dart".
* Tue Jan 31 2006 Dave Jones <<davej(a)redhat.com>
- Remove prereq on hardlink, making hardlinking of -devel packages optional
- Further improvements to the 'dont want to hardlink' case.
Now checks for HARDLINK="no" in /etc/sysconfig/kernel
* Tue Jan 31 2006 Don Zickus <<dzickus(a)redhat.com>
- Enable x86-64 kdumping, and kdump related specfile cleanup.
libFS-1.0.0-2
-------------
* Mon Jan 23 2006 Mike A. Harris <mharris(a)redhat.com> 1.0.0-2
- Bumped and rebuilt
m17n-db-1.3.1-1
---------------
* Thu Feb 02 2006 Jens Petersen <petersen(a)redhat.com> - 1.3.1-1
- update to 1.3.1 release
- add new icons to language subpackages
- new common-cjk subpackage for CJK common files
- new Swedish subpackage
- exclude new pkgconfig file
openoffice.org-1:2.0.1.1-9.2
----------------------------
* Fri Jan 27 2006 Caolan McNamara <caolanm(a)redhat.com> - 1:2.0.1.1-9
- add openoffice.org-2.0.2.ooo61178.ucb.neon25.patch for neon 0.25.X
- missing %defattr(-,root,root)
- rh#179256# if java fails (i.e. was configured to use libgcj.so.6) reconfigure
to pick up libgcj.so.7
- rh#177205# add some templates, including a fedora themed presentation
openssh-4.3p1-1
---------------
* Wed Feb 01 2006 Tomas Mraz <tmraz(a)redhat.com> - 4.3p1-1
- new version, dropped obsolete patches
pam_smb-1.1.7-7
---------------
* Wed Feb 01 2006 Nalin Dahyabhai <nalin(a)redhat.com> 1.1.7-7
- remove a stray quote from configure.in that was causing a syntax error
and breaking recompiles (upstream #1422089)
perl-4:5.8.8-1
--------------
* Wed Feb 01 2006 Jason Vas Dias <jvdias(a)redhat.com> - 4:5.8.8-1
- Upgrade to new upstream release 5.8.8, officially released today
* Tue Jan 31 2006 Jason Vas Dias <jvdias(a)redhat.com> - 3:5.8.8-0.1_RC1
- fix bug 178343: h2ph must include cpp "predefined macros" in _h2ph_pre.ph
- Add perl(:MODULE_COMPAT_5.8.8) to Provides
- Fix perlbug patch
* Fri Jan 20 2006 Jason Vas Dias <jvdias(a)redhat.com> - 3:5.8.8-0_RC1
- Upgrade to new upstream release candidate 5.8.8-RC1
pirut-0.9.8-1
-------------
* Thu Feb 02 2006 Jeremy Katz <katzj(a)redhat.com> - 0.9.8-1
- Some fixes to single-install-packages from Tim Lauridsen (#178908)
- Tweaks to the optional packages installed label (#178088, #179205)
pykickstart-0.17-1
------------------
* Wed Feb 01 2006 Chris Lumens <clumens(a)redhat.com> 0.17-1
- Don't set a default port for vnc.
python-sqlite-1.1.6-3
---------------------
* Wed Feb 01 2006 Paul Nasrat <pnasrat(a)redhat.com> - 1.1.6-3
- Pass valid parameter to prepare (#179547)
- Temporarily remove %check
* Wed Feb 01 2006 Paul Nasrat <pnasrat(a)redhat.com> - 1.1.6-2
- Rebuild
redhat-artwork-0.235-2
----------------------
* Mon Jan 30 2006 Ray Strode <rstrode(a)redhat.com> 0.235-2
- create symlinks from redhat artwork to gnome overrides
redhat-menus-6.5.4-2
--------------------
* Wed Feb 01 2006 Ray Strode <rstrode(a)redhat.com> - 6.5.4-2
- fix applications menu
* Wed Feb 01 2006 Ray Strode <rstrode(a)redhat.com> - 6.5.4-1
- merge /usr/local/share/applications
- ship separate directory file for System menu
rhpxl-0.13-1
------------
* Wed Feb 01 2006 Chris Lumens <clumens(a)redhat.com> 0.13-1
- Add aspect ratio patch from Jef Spaleta <jspaleta AT gmail.com> (#158143).
rhythmbox-0.9.3-2
-----------------
* Wed Feb 01 2006 Christopher Aillon <caillon(a)redhat.com> 0.9.3-2
- Remove hack for 173869, as its no longer needed.
* Wed Feb 01 2006 Christopher Aillon <caillon(a)redhat.com> 0.9.3-1
- 0.9.3
* Wed Feb 01 2006 Christopher Aillon <caillon(a)redhat.com> 0.9.2.cvs20060201-1
- Newer CVS snapshot
selinux-policy-2.2.9-2
----------------------
* Wed Feb 01 2006 Dan Walsh <dwalsh(a)redhat.com> 2.2.9-2
- Fix for spamd to use ldap
* Fri Jan 27 2006 Dan Walsh <dwalsh(a)redhat.com> 2.2.9-1
- Update to upstream
system-config-soundcard-1.2.14-6
--------------------------------
* Wed Feb 01 2006 Martin Stransky <stransky(a)redhat.com> 1.2.14-6
- added alsa-lib/utils log
Broken deps for i386
----------------------------------------------------------
GFS-kernel - 2.6.14.1-20051219.162641.FC5.9.i686 requires kernel = 0:2.6.15-1.1826.2.10_FC5
GFS-kernel - 2.6.14.1-20051219.162641.FC5.9.i686 requires /lib/modules/2.6.15-1.1826.2.10_FC5
GFS-kernel-smp - 2.6.14.1-20051219.162641.FC5.9.i686 requires /lib/modules/2.6.15-1.1826.2.10_FC5smp
GFS-kernel-smp - 2.6.14.1-20051219.162641.FC5.9.i686 requires kernel-smp = 0:2.6.15-1.1826.2.10_FC5
cman-kernel - 2.6.14.1-20051219.162641.FC5.10.i686 requires kernel = 0:2.6.15-1.1826.2.10_FC5
cman-kernel - 2.6.14.1-20051219.162641.FC5.10.i686 requires /lib/modules/2.6.15-1.1826.2.10_FC5
cman-kernel-smp - 2.6.14.1-20051219.162641.FC5.10.i686 requires /lib/modules/2.6.15-1.1826.2.10_FC5smp
cman-kernel-smp - 2.6.14.1-20051219.162641.FC5.10.i686 requires kernel-smp = 0:2.6.15-1.1826.2.10_FC5
dlm-kernel - 2.6.14.1-20051219.162641.FC5.8.i686 requires kernel = 0:2.6.15-1.1826.2.10_FC5
dlm-kernel - 2.6.14.1-20051219.162641.FC5.8.i686 requires /lib/modules/2.6.15-1.1826.2.10_FC5
dlm-kernel-smp - 2.6.14.1-20051219.162641.FC5.8.i686 requires /lib/modules/2.6.15-1.1826.2.10_FC5smp
dlm-kernel-smp - 2.6.14.1-20051219.162641.FC5.8.i686 requires kernel-smp = 0:2.6.15-1.1826.2.10_FC5
gnbd-kernel - 2.6.14.0-20051108.134753.FC5.14.i686 requires kernel = 0:2.6.15-1.1826.2.10_FC5
gnbd-kernel - 2.6.14.0-20051108.134753.FC5.14.i686 requires /lib/modules/2.6.15-1.1826.2.10_FC5
gnbd-kernel-smp - 2.6.14.0-20051108.134753.FC5.14.i686 requires /lib/modules/2.6.15-1.1826.2.10_FC5smp
gnbd-kernel-smp - 2.6.14.0-20051108.134753.FC5.14.i686 requires kernel-smp = 0:2.6.15-1.1826.2.10_FC5
Broken deps for ia64
----------------------------------------------------------
rgmanager - 1.9.31-3.ia64 requires ccs
Broken deps for ppc
----------------------------------------------------------
ccs-devel - 1.0.2-3.1.ppc requires ccs = 0:1.0.2-3.1
gulm - 1.0.4-2.FC5.1.ppc requires ccs
Broken deps for ppc64
----------------------------------------------------------
cman - 1.0.3-5.FC5.ppc64 requires cman-kernel-modules >= 0:2.6.11
dlm - 1.0.0-7.FC5.ppc64 requires dlm-kernel-modules >= 0:2.6.11
emacs - 21.4-5.ppc64 requires fonts-xorg-75dpi
gnbd - 1.0.1-2.ppc64 requires gnbd-kernel-modules >= 0:2.6.11
Broken deps for s390
----------------------------------------------------------
systemtap - 0.5.3-2.s390 requires kernel >= 0:2.6.9-11
systemtap - 0.5.3-2.s390 requires kernel-devel
Broken deps for s390x
----------------------------------------------------------
libvte-java - 0.11.11-7.s390x requires libgtkjava-2.8.so()(64bit)
libvte-java - 0.11.11-7.s390x requires libgtkjni-2.8.so()(64bit)
systemtap - 0.5.3-2.s390x requires kernel >= 0:2.6.9-11
systemtap - 0.5.3-2.s390x requires kernel-devel
Broken deps for x86_64
----------------------------------------------------------
GFS-kernel - 2.6.14.1-20051219.162641.FC5.9.x86_64 requires kernel = 0:2.6.15-1.1826.2.10_FC5
GFS-kernel - 2.6.14.1-20051219.162641.FC5.9.x86_64 requires /lib/modules/2.6.15-1.1826.2.10_FC5
cman-kernel - 2.6.14.1-20051219.162641.FC5.10.x86_64 requires kernel = 0:2.6.15-1.1826.2.10_FC5
cman-kernel - 2.6.14.1-20051219.162641.FC5.10.x86_64 requires /lib/modules/2.6.15-1.1826.2.10_FC5
dlm-kernel - 2.6.14.1-20051219.162641.FC5.8.x86_64 requires kernel = 0:2.6.15-1.1826.2.10_FC5
dlm-kernel - 2.6.14.1-20051219.162641.FC5.8.x86_64 requires /lib/modules/2.6.15-1.1826.2.10_FC5
gnbd-kernel - 2.6.14.0-20051108.134753.FC5.14.x86_64 requires kernel = 0:2.6.15-1.1826.2.10_FC5
gnbd-kernel - 2.6.14.0-20051108.134753.FC5.14.x86_64 requires /lib/modules/2.6.15-1.1826.2.10_FC5
18 years, 2 months
Internal Server Error at https://bugzilla.redhat.com/
by Rodd Clarkson
I'm seeing:
Internal Server Error
The server encountered an internal error or misconfiguration and was
unable to complete your request.
Please contact the server administrator, bugzilla(a)redhat.com and inform
them of the time the error occurred, and anything you might have done
that may have caused the error.
More information about this error may be available in the server error
log.
________________________________________________________________________
Apache/2.0.46 (Red Hat) Server at bugzilla.redhat.com Port 443
When I try to view
https://bugzilla.redhat.com/bugzilla/index.cgi
R.
--
MOOSE technology
po box 6061, north croydon, vic 3136 mobile: 0403 338 731
http://www.moosetech.com.au phone: 03 9726 9457
mailto:rodd@moosetech.com.au fax: 03 9726 9456
"Share your knowledge. It is a way to achieve immortality."
-- The Dalai Lama
--
"It's a fine line between denial and faith.
It's much better on my side"
18 years, 2 months
Re: rawhide report: 20060202 changes
by Peter Jones
On Mon, 2006-02-06 at 18:38 -0800, Alain Mellan wrote:
> I get the same error w/ Beagle.
>
> BTW, upgrading to sqlite 3.3.3-1 still send yum in infinite loop. Had
> to downgrade to 3.3.2.
You need to update python-sqlite .
--
Peter
18 years, 2 months
What is the proper way to fix 'make tag' and 'make plague' conflict
by Paul Wouters
Hey,
Sometimes I am stupid and I forget to make tag after commiting my files
and trying out make plague. You then end up in a situation where your
release version exists in limbo:
# make tag
cvs tag -c fetchlog-1_0-3_fc5
For more information on using the Fedora CVS repositories, please visit http://fedoraproject.org/wiki/UsingCvs
? clog
cvs tag: .cvsignore is locally modified
ERROR: Tag fetchlog-1_0-3_fc5 has been already created.
cvs tag: Pre-tag check failed
cvs [tag aborted]: correct the above errors first!
make: *** [tag] Error 1
[root@bofh devel]# make plague
fetchlog.spec not tagged with tag fetchlog-1_0-3_fc5
make: *** [plague] Error 1
My fix so far has been to just bump the release, but that's rather ugly.
Is there a "proper" fix for this situation (excluding brain surgery)
Paul
18 years, 2 months