Processed: retitle 406111
Processing commands for [EMAIL PROTECTED]: retitle 406111 linux-image-2.6.18-3-686: i915 module loading fails with 'cannot initialize agpgart' error. Bug#406111: linux-image-2.6.18-3-686: i915 module loading failes with 'cannot initialize agpgart' error. Changed Bug title to linux-image-2.6.18-3-686: i915 module loading fails with 'cannot initialize agpgart' error. from linux-image-2.6.18-3-686: i915 module loading failes with 'cannot initialize agpgart' error.. End of message, stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#417995: initramfs-tools: lets ordinary users read the root filesystem's raw block device
Steve Langasek [EMAIL PROTECTED] writes:
On Fri, Apr 06, 2007 at 01:39:35AM +0200, Fabian Pietsch wrote:
--- /usr/share/initramfs-tools/scripts/functions.orig
+++ /usr/share/initramfs-tools/scripts/functions
@@ -231,6 +231,7 @@
;;
esac
mknod /dev/root b ${major} ${minor}
+chmod go-rw /dev/root
ROOT=/dev/root
}
This looks like an appropriate fix to me.
Cheers,
Wouldn't it be better to set the mode instead of alter it? What if the
next mknod decides to not give r permissions on /dev/root or
something? Just seems more robust to chmod to 0400 or 0600.
MfG
Goswin
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Processing of initramfs-tools_0.85g_i386.changes
initramfs-tools_0.85g_i386.changes uploaded successfully to localhost along with the files: initramfs-tools_0.85g.dsc initramfs-tools_0.85g.tar.gz initramfs-tools_0.85g_all.deb Greetings, Your Debian queue daemon -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
initramfs-tools_0.85g_i386.changes ACCEPTED
Accepted: initramfs-tools_0.85g.dsc to pool/main/i/initramfs-tools/initramfs-tools_0.85g.dsc initramfs-tools_0.85g.tar.gz to pool/main/i/initramfs-tools/initramfs-tools_0.85g.tar.gz initramfs-tools_0.85g_all.deb to pool/main/i/initramfs-tools/initramfs-tools_0.85g_all.deb Override entries for your package: initramfs-tools_0.85g.dsc - source utils initramfs-tools_0.85g_all.deb - optional utils Announcing to debian-devel-changes@lists.debian.org Closing bugs: 417995 Thank you for your contribution to Debian. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#417995: marked as done (initramfs-tools: lets ordinary users read the root filesystem's raw block device)
Your message dated Fri, 06 Apr 2007 07:47:02 +
with message-id [EMAIL PROTECTED]
and subject line Bug#417995: fixed in initramfs-tools 0.85g
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
---BeginMessage---
Package: initramfs-tools
Version: 0.85f
Severity: critical
Tags: security patch
Justification: root security hole
A system that was booted from an initramfs created by initramfs-tools has
the following device node in the booted system's /dev:
| brw-r--r-- 1 root root 3, 7 Apr 6 00:38 /dev/root
This allows ordinary users to read the raw root filesystem, i.e.,
its block device. Bypassing the normal filesystem access restrictions
with this becomes easy through, e.g., /sbin/debugfs from e2fsprogs,
a Priority: required package. After reading /etc/shadow, passwords of
other accounts on the system may be cracked. Other authentication data
often is even unencrypted, like the boot loader password from
/etc/lilo.conf, which allows a local attacker to reboot with, e.g.,
init=/bin/bash, and take full control of the system. /blah
The device node is created prior to mounting the root filesystem, by a
script shared between initramfs generator and generated initramfs.
klibc-utils' mknod doesn't seem to support passing permissions on the
command line, so umask or chmod would be needed. For BUSYBOX=y in
/etc/initramfs-tools/initramfs.conf, after applying the following patch,
running update-initramfs -u and rebooting, the device node's permissions
are sane:
| brw--- 1 root root 3, 7 Apr 6 00:50 /dev/root
--- /usr/share/initramfs-tools/scripts/functions.orig
+++ /usr/share/initramfs-tools/scripts/functions
@@ -231,6 +231,7 @@
;;
esac
mknod /dev/root b ${major} ${minor}
+ chmod go-rw /dev/root
ROOT=/dev/root
}
-- Package-specific info:
-- /proc/cmdline
auto BOOT_IMAGE=debian ro root=307 resume=/dev/hda4
-- /proc/filesystems
cramfs
ext3
-- lsmod
Module Size Used by
ipv6 226016 18
button 6672 0
ac 5188 0
battery 9636 0
nfs 202828 2
lockd 54344 2 nfs
nfs_acl 3584 1 nfs
sunrpc138812 4 nfs,lockd,nfs_acl
dm_snapshot15552 0
dm_mirror 19152 0
dm_mod 50232 2 dm_snapshot,dm_mirror
r128 34816 0
drm61332 1 r128
3c509 11828 0
snd_ens137123616 1
tsdev 7520 0
gameport 14632 1 snd_ens1371
snd_ac97_codec 83104 1 snd_ens1371
snd_ac97_bus2400 1 snd_ac97_codec
snd_pcm_oss38368 0
snd_mixer_oss 15200 2 snd_pcm_oss
snd_pcm68676 3 snd_ens1371,snd_ac97_codec,snd_pcm_oss
snd_seq_dummy 3844 0
snd_seq_oss28768 0
snd_seq_midi8192 0
snd_rawmidi22560 2 snd_ens1371,snd_seq_midi
floppy 53156 0
psmouse35016 0
parport_pc 32132 0
parport33256 1 parport_pc
snd_seq_midi_event 7008 2 snd_seq_oss,snd_seq_midi
snd_seq45680 6
snd_seq_dummy,snd_seq_oss,snd_seq_midi,snd_seq_midi_event
pcspkr 3072 0
rtc12372 0
serio_raw 6660 0
snd_timer 20996 2 snd_pcm,snd_seq
snd_seq_device 7820 5
snd_seq_dummy,snd_seq_oss,snd_seq_midi,snd_rawmidi,snd_seq
bttv 159732 0
video_buf 23012 1 bttv
firmware_class 9600 1 bttv
ir_common 27780 1 bttv
compat_ioctl32 1472 1 bttv
i2c_algo_bit8424 1 bttv
btcx_risc 4776 1 bttv
tveeprom 13840 1 bttv
videodev 21120 1 bttv
v4l1_compat12036 1 videodev
v4l2_common20448 2 bttv,videodev
snd47012 10
snd_ens1371,snd_ac97_codec,snd_pcm_oss,snd_mixer_oss,snd_pcm,snd_seq_oss,snd_rawmidi,snd_seq,snd_timer,snd_seq_device
soundcore 9248 2 snd
i2c_piix4 8140 0
snd_page_alloc 9640 1 snd_pcm
i2c_core 19680 4 bttv,i2c_algo_bit,tveeprom,i2c_piix4
shpchp 33024 0
intel_agp 21148 1
pci_hotplug28704 1 shpchp
agpgart29896 2 drm,intel_agp
evdev 9088 0
ext3 119240 2
jbd52456 1 ext3
mbcache
Bug#417121: pcmciautils: Data Corruption while using Texas Instrument PCI7420 --CardBus
Hi Subhashis, Have you ever used this card reader successfully under any other operating systems? It's certainly possible that this is a kernel bug, since this class of hardware only recently became supported by Linux, but the error message in question could also be a hardware fault so we should probably rule that out too. Thanks, -- Steve Langasek Give me a lever long enough and a Free OS Debian Developer to set it on, and I can move the world. [EMAIL PROTECTED] http://www.debian.org/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Processed: Reassigning 8 years old still present bug
Processing commands for [EMAIL PROTECTED]: reassign 40346 linux-2.6 Bug#40346: ifconfig doesn't shut down interface Bug#325229: ifconfig.8.gz: down but still could ping Bug reassigned from package `net-tools' to `linux-2.6'. thanks Stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#40346: Reassigning 8 years old still present bug
On Fri, Apr 06, 2007 at 06:10:05AM -0300, Martín Ferrari wrote: reassign 40346 linux-2.6 thanks Hi, this could be strange, but this 5-digits bug is still open. Summary: removing a aliased interface doesn't kill existing connections. I can reproduce it, but it doesn't seem to be net-tools fault, as the interface is correctly removed (ifconfig and ip a l doesn't list it anymore). I'm not even sure if this is a bug or not, but I think it's up to kernel maintainers to decide on that. This is often explained on linux-net in the last time. It is due to linux host (instead of interface) based addressing model. You need to remove the address instead of downing the interface. Removing is not currently supported by ifconfig for ipv4. So it is somewhat a net-tools bug. Gruss Bernd -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#418076: linux-2.6: cannot mount network filesystems
Package: linux-2.6 Version: 2.6.18.dfsg.1-12 Severity: important Tags: patch The VXC_BINARY_MOUNT capability should be sufficient to mount network filesystems, but its not. Due to this bug, users currently must grant a vserver SYS_ADMIN capabilities in order to mount network filesystems. Though this works, SYS_ADMIN also gives the vserver a hell of a lot of other privileges as well (turn swap off on, configure md, access to nvram, etc). See http://linux-vserver.org/Capabilities_and_Flags for the full list. This patch from upstream fixes the issue. diff -NurpP --minimal linux-2.6.18.5-vs2.0.2.2-rc9/fs/super.c linux-2.6.18.5-vs2.0.3-rc1/fs/super.c --- linux-2.6.18.5-vs2.0.2.2-rc9/fs/super.c 2006-09-20 17:59:47 +0200 +++ linux-2.6.18.5-vs2.0.3-rc1/fs/super.c 2006-12-13 23:06:16 +0100 @@ -848,7 +848,7 @@ vfs_kern_mount(struct file_system_type * sb = mnt-mnt_sb; error = -EPERM; - if (!capable(CAP_SYS_ADMIN) !sb-s_bdev + if (!vx_capable(CAP_SYS_ADMIN, VXC_BINARY_MOUNT) !sb-s_bdev (sb-s_magic != PROC_SUPER_MAGIC) (sb-s_magic != DEVPTS_SUPER_MAGIC)) goto out_sb; -- System Information: Debian Release: lenny/sid APT prefers unstable APT policy: (500, 'unstable'), (1, 'experimental') Architecture: ia64 Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.18-4-itanium Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Processed: tagging 418076
Processing commands for [EMAIL PROTECTED]: tags 418076 + pending Bug#418076: linux-2.6: cannot mount network filesystems Tags were: patch Tags added: pending End of message, stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Processed: tagging 414640
Processing commands for [EMAIL PROTECTED]: # Automatically generated email from bts, devscripts version 2.9.26 tags 414640 pending Bug#414640: initramfs-tools: message printed when root timeout exceeded is too terse There were no tags set. Tags added: pending End of message, stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Processed: tagging 406107
Processing commands for [EMAIL PROTECTED]: # Automatically generated email from bts, devscripts version 2.9.26 tags 406107 pending Bug#406107: unset parameter in panic() function Tags were: patch Tags added: pending End of message, stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Processed: tagging 378682
Processing commands for [EMAIL PROTECTED]: # Automatically generated email from bts, devscripts version 2.9.26 tags 378682 pending Bug#378682: initramfs-tools: Please add a check in mkinitramfs to stop script names causing panics. There were no tags set. Tags added: pending End of message, stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Processed: tagging 403905
Processing commands for [EMAIL PROTECTED]: # Automatically generated email from bts, devscripts version 2.9.26 tags 403905 pending Bug#403905: initramfs-tools: update-initramfs depends on outside environment There were no tags set. Tags added: pending End of message, stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Processed: tagging 415474
Processing commands for [EMAIL PROTECTED]: # Automatically generated email from bts, devscripts version 2.9.26 tags 415474 - patch Bug#415474: mkinitramfs fails with monolithic kernels Tags were: patch Tags removed: patch End of message, stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Processed: merging 401916 381351
Processing commands for [EMAIL PROTECTED]: # Automatically generated email from bts, devscripts version 2.9.26 merge 401916 381351 Bug#381351: initramfs-tools: ide-disk/specific ide modules not loaded and vgchange -ay fails using lvm2 Bug#401916: initramfs-tools: [powerpc64] i-t tries to mount RAID/LVM stuff before the disk are up - unbootable Bug#366175: initramfs-tools: lvm is not initialized on USB disks Merged 366175 381351 401916. End of message, stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Processed: tagging 398347
Processing commands for [EMAIL PROTECTED]: # Automatically generated email from bts, devscripts version 2.9.26 tags 398347 pending Bug#398347: hooks should respect run-parts naming conventions There were no tags set. Tags added: pending End of message, stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Processed: tagging 409995
Processing commands for [EMAIL PROTECTED]: # Automatically generated email from bts, devscripts version 2.9.26 tags 409995 pending Bug#409995: mkinitramfs silently fails to create bootable initrd when PATH lacks /sbin There were no tags set. Tags added: pending End of message, stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#40346: Reassigning 8 years old still present bug
Hi again, On 4/6/07, Bernd Eckenfels [EMAIL PROTECTED] wrote: I can reproduce it, but it doesn't seem to be net-tools fault, as the interface is correctly removed (ifconfig and ip a l doesn't list it anymore). I'm not even sure if this is a bug or not, but I think it's up to kernel maintainers to decide on that. This is often explained on linux-net in the last time. It is due to linux host (instead of interface) based addressing model. You need to remove the address instead of downing the interface. Removing is not currently supported by ifconfig for ipv4. So it is somewhat a net-tools bug. I kept testing this one. And ifconfig does the same as ip addr del: it removes the address! And the connection, even when still exists to the socket layer, cannot transfer anything: incoming packets ignored, outgoing packets not sent (I don't know if they stall in a queue or are discarded), ping ignored, arp unanswered. So, I don't know why you say that this doesn't work for ifconfig. I now think that the bug should be closed for good. -- Martín Ferrari
initramfs-tools 0.85g MIGRATED to testing
FYI: The status of the initramfs-tools source package in Debian's testing distribution has changed. Previous version: 0.85f Current version: 0.85g -- This email is automatically generated; [EMAIL PROTECTED] is responsible. See http://people.debian.org/~henning/trille/ for more information. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#418114: intellimouse linux-image-2.6-686
Package: linux-image-2.6.18-4-686 Version: 2.6.18+6 Hardware: m-s69 logitech mouse (a simple PS/2 mouse) Problem: mouse error: I must unplug/plug the mouse into PS/2 to get mouse to work. Some relevant output: $ dmesg | grep -in mouse 162:mice: PS/2 mouse device common for all mice 242:input: ImPS/2 Logitech Wheel Mouse as /class/input/input2 243:psmouse.c: Failed to enable mouse on isa0060/serio1 Notes: In order to use mouse I must unplug it and then plug it in upon entering X. Not a problem for myself but I have installed this OS for my father who is neads things to work.
Bug#40346: Reassigning 8 years old still present bug
On Fri, Apr 06, 2007 at 07:31:51PM -0300, Martín Ferrari wrote: I kept testing this one. And ifconfig does the same as ip addr del: it removes the address! you mean ifconfig eth0 0 down, or how do you remove the ip with ifconfig? Recent Discussion: http://www.mail-archive.com/linux-net@vger.kernel.org/msg01235.html Gruss Bernd -- (OO) -- [EMAIL PROTECTED] -- ( .. )[EMAIL PROTECTED],linux.de,debian.org} http://www.eckes.org/ o--o 1024D/E383CD7E [EMAIL PROTECTED] v:+497211603874 f:+49721151516129 (OO) When cryptography is outlawed, bayl bhgynjf jvyy unir cevinpl! -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#40346: Reassigning 8 years old still present bug
On 4/6/07, Bernd Eckenfels [EMAIL PROTECTED] wrote: On Fri, Apr 06, 2007 at 07:31:51PM -0300, Martín Ferrari wrote: I kept testing this one. And ifconfig does the same as ip addr del: it removes the address! you mean ifconfig eth0 0 down, or how do you remove the ip with ifconfig? I did ifconfig eth0:0 down and it worked just ok. Recent Discussion: http://www.mail-archive.com/linux-net@vger.kernel.org/msg01235.html But I think that there is something different being discussed: pinging a local address in an inactive interface. Or I misread this bug, but I think the problem was remote pinging to a supposedly removed address. And that's what AJ tested back on the day. -- Martín Ferrari
Bug#40346: Reassigning 8 years old still present bug
On Fri, Apr 06, 2007 at 10:31:07PM -0300, Martín Ferrari wrote: But I think that there is something different being discussed: pinging a local address in an inactive interface. Or I misread this bug, but I think the problem was remote pinging to a supposedly removed address. And that's what AJ tested back on the day. Well, maybe it is different, dont know. Hosts react to ip addresses even if the associated interface is down. Thats by definition and might be related to the bug. Gruss Bernd -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#40346: Reassigning 8 years old still present bug
On 4/6/07, Bernd Eckenfels [EMAIL PROTECTED] wrote: On Fri, Apr 06, 2007 at 10:31:07PM -0300, Martín Ferrari wrote: But I think that there is something different being discussed: pinging a local address in an inactive interface. Or I misread this bug, but I think the problem was remote pinging to a supposedly removed address. And that's what AJ tested back on the day. Well, maybe it is different, dont know. Hosts react to ip addresses even if the associated interface is down. Thats by definition and might be related to the bug. Yeah, that's by design. But currently, ifconfig is deleting the address as expected when you down an alias... So, what can be done with this bug? I'd close it as done. -- Martín Ferrari
Bug#40346: Reassigning 8 years old still present bug
On Fri, Apr 06, 2007 at 10:58:22PM -0300, Martín Ferrari wrote: Yeah, that's by design. But currently, ifconfig is deleting the address as expected when you down an alias... So, what can be done with this bug? I'd close it as done. ifconfig is not deleting the address, it is only cleaning the IFF_UP flag from it... I dont think ifconfig allows address deletion. I am not sure if the bug still exists or not. If it exists, it is a kernel problem. However it might not be a bug at all, since it can be related to the host-based address model. Gruss Bernd -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
