On 2/6/20 10:01 AM, Bruce Dubbs wrote:
On 2/6/20 2:38 AM, Wayne Blaszczyk via blfs-support wrote:
On Tue, 2020-02-04 at 18:07 +0000, Ken Moffat via blfs-support wrote:
On Tue, Feb 04, 2020 at 04:59:38PM +0530, Herbert Laubner via blfs-support wrote:
Hello together,

I have set up a PC using jhalfs with SVN-20200201. This is not the first
time installing LFS for me.


glibc-2.31, I think ?

I saw something about openssh and that yesterday, somewhere.  Ah
yes, at the bottom of https://lwn.net/Articles/811275/#Comments
(that might be subscribers only at the moment so I'll quote) - "it
might be useful to know that the current OpenSSH (8.1p1) needs some
patches backported to update the system call filter - grab the last
few from here. Without those, it'll just close the connection when
you try to log in, as nanosleep causes a SIGSYS. Otherwise it all
seems to work well so far!"

And 'here' is a link to
https://github.com/openssh/openssh-portable/commits/master/sandbox-seccomp-filter.c

I'm not sure, but I'll guess perhaps latest back as far as Nov 13th,
or maybe not all of those.  Unfortunately, I'm not running
glibc-2.31 at the moment (looking for pre-existing problems, so I
can distinguish them from glibc-related).

If you patch it successfully, please let us know and provide the
patch.  Thanks.

ĸen
--
We had folksingers in the lower bar for six months back home where
I worked.  In the end we had to get a man in with a ferret.
                    -- Polly, in "Interesting Times"

The following single patch fixed the issue for me:

https://src.fedoraproject.org/rpms/openssh/raw/master/f/openssh-8.1p1-seccomp-nanosleep.patch

Thanks Wayne.  Taking a look at the patch, the second part appears to only apply to ARM.  When I look at the source for openssh-8.0p1, the first part seems to be present already.

Are we talking about an ARM installation here?

Never mind.  The patch seemd to do the right thing.

  -- Bruce

--
http://lists.linuxfromscratch.org/listinfo/blfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page

Reply via email to