Package: libpython2.7-stdlib
Version: 2.7.9-2
Severity: important
File: /usr/lib/python2.7/ctypes/__init__.py

Dear Maintainer,

We're currently running our systems on the grsec kernel. However, this
breaks functionality of the ctypes module. Upon importing ctypes, this
is what happens:

Python 2.7.9 (default, Mar  1 2015, 12:57:24) 
[GCC 4.9.2] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>> import ctypes
Traceback (most recent call last):
  File "<stdin>", line 1, in <module>
  File "/usr/lib/python2.7/ctypes/__init__.py", line 555, in <module>
    _reset_cache()
  File "/usr/lib/python2.7/ctypes/__init__.py", line 279, in _reset_cache
    CFUNCTYPE(c_int)(lambda: None)
MemoryError
>>>

The following lines appear in the dmesg output:

[Mon Mar 30 13:54:18 2015] grsec: From 127.0.0.6: denied untrusted exec (due to 
not being in trusted group and file in world-writable directory) of 
/tmp/ffiYA8PuQ by /usr/bin/python2.7[python:25443] uid/euid:1438/1438 
gid/egid:1438/1438, parent /bin/bash[bash:25408] uid/euid:1438/1438 
gid/egid:1438/1438
[Mon Mar 30 13:54:18 2015] grsec: From 127.0.0.6: denied untrusted exec (due to 
not being in trusted group and file in world-writable directory) of 
/var/tmp/ffifw8yBX by /usr/bin/python2.7[python:25443] uid/euid:1438/1438 
gid/egid:1438/1438, parent /bin/bash[bash:25408] uid/euid:1438/1438 
gid/egid:1438/1438
[Mon Mar 30 13:54:18 2015] grsec: From 127.0.0.6: denied untrusted exec (due to 
not being in trusted group and file in world-writable directory) of 
/dev/shm/ffimQVAT4 by /usr/bin/python2.7[python:25443] uid/euid:1438/1438 
gid/egid:1438/1438, parent /bin/bash[bash:25408] uid/euid:1438/1438 
gid/egid:1438/1438
[Mon Mar 30 13:54:18 2015] grsec: From 127.0.0.6: denied untrusted exec (due to 
not being in trusted group and file in non-root-owned directory) of 
/data/home/willemm/.nfs00000000004a0e7700000002 by 
/usr/bin/python2.7[python:25443] uid/euid:1438/1438 gid/egid:1438/1438, parent 
/bin/bash[bash:25408] uid/euid:1438/1438 gid/egid:1438/1438
[Mon Mar 30 13:54:18 2015] grsec: From 127.0.0.6: denied untrusted exec (due to 
not being in trusted group and file in world-writable directory) of 
/dev/shm/ffiSh1Ubk by /usr/bin/python2.7[python:25443] uid/euid:1438/1438 
gid/egid:1438/1438, parent /bin/bash[bash:25408] uid/euid:1438/1438 
gid/egid:1438/1438
[Mon Mar 30 13:54:19 2015] grsec: From 127.0.0.6: denied untrusted exec (due to 
not being in trusted group and file in non-root-owned directory) of 
/run/user/1438/ffie2sugA by /usr/bin/python2.7[python:25443] uid/euid:1438/1438 
gid/egid:1438/1438, parent /bin/bash[bash:25408] uid/euid:1438/1438 
gid/egid:1438/1438
[Mon Mar 30 13:54:19 2015] grsec: From 127.0.0.6: denied untrusted exec (due to 
not being in trusted group and file in world-writable directory) of 
/dev/shm/ffiD5w9xI by /usr/bin/python2.7[python:25443] uid/euid:1438/1438 
gid/egid:1438/1438, parent /bin/bash[bash:25408] uid/euid:1438/1438 
gid/egid:1438/1438
[Mon Mar 30 13:54:19 2015] grsec: more alerts, logging disabled for 10 seconds

This breaks several packages, including all packages depending on
python-twisted.

This bug was reported for python 2.6 as bug #598727.

-- SystemInformation:
Debian Release: 8.0
  APT prefers testing
  APT policy: (990, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 3.17.7-hardened-r1 (SMP w/4 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libpython2.7-stdlib:amd64 depends on:
ii  libbz2-1.0            1.0.6-7+b3
ii  libc6                 2.19-15
ii  libdb5.3              5.3.28-9
ii  libexpat1             2.1.0-6+b3
ii  libffi6               3.1-2+b2
ii  libncursesw5          5.9+20140913-1+b1
ii  libpython2.7-minimal  2.7.9-2
ii  libreadline6          6.3-8+b3
ii  libsqlite3-0          3.8.7.1-1
ii  libssl1.0.0           1.0.1k-1
ii  libtinfo5             5.9+20140913-1+b1
ii  mime-support          3.58

libpython2.7-stdlib:amd64 recommends no packages.

libpython2.7-stdlib:amd64 suggests no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to