[Touch-packages] [Bug 1690485] Re: openssh-server SIGSYS with 'UsePrivilegeSeparation sandbox'

2017-11-07 Thread Kevin Kenny
Not trying to pester, but bumping this in case you didn't see that I posted the requested file. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to openssh in Ubuntu. https://bugs.launchpad.net/bugs/1690485 Title:

[Touch-packages] [Bug 1690485] Re: openssh-server SIGSYS with 'UsePrivilegeSeparation sandbox'

2017-10-30 Thread KEVIN KENNY
Yeah, this is almost starting to look like malware trying to exfiltrate keys somehow! Unauthorized socket I/O being done by a library that doesn't match the symbol tables? (I'm glad I don't have any Kerberos keys to leak!) ** Attachment added: "libkeyutils.so.1.5"

[Touch-packages] [Bug 1690485] Re: openssh-server SIGSYS with 'UsePrivilegeSeparation sandbox'

2017-10-27 Thread KEVIN KENNY
Disable ssl-engine, re-enable kerberos5, it still crashes. I'm pretty sure I'm running a stock OpenSSL. The only things that I can think of that I might have done in that general vicinity were to install xinetd, althttpd, and stunnel4, and to obtain a host certificate from letsencrypt.org. I'm

[Touch-packages] [Bug 1690485] Re: openssh-server SIGSYS with 'UsePrivilegeSeparation sandbox'

2017-10-27 Thread KEVIN KENNY
(And, for what it's worth, I don't, to the best of my knowledge, have anything Kerberos-related set up. There is no /etc/krb5.conf file. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to openssh in Ubuntu.

[Touch-packages] [Bug 1690485] Re: openssh-server SIGSYS with 'UsePrivilegeSeparation sandbox'

2017-10-27 Thread KEVIN KENNY
I lied. I experimented with ./configure flags. --with-kerberos5=/usr is definitely the flag that is triggering the crash. Removing this flag alone cures the crash. Command that was used: ../configure --build=x86_64-linux-gnu --prefix=/usr \ --includedir=\${prefix}/include

[Touch-packages] [Bug 1690485] Re: openssh-server SIGSYS with 'UsePrivilegeSeparation sandbox'

2017-10-27 Thread KEVIN KENNY
OK, I applied your patch, and was lucid enough to follow farther into the maze with a few additional debug3's. I get down into the 'cipher_crypt' function, at line 378: if (EVP_Cipher(cc->evp, dest + aadlen, (u_char *)src + aadlen, len) < 0) return

[Touch-packages] [Bug 1690485] Re: openssh-server SIGSYS with 'UsePrivilegeSeparation sandbox'

2017-10-26 Thread KEVIN KENNY
Seth: Your requested output is perf-20171026.txt It's not clear to me what's out of the ordinary in the stack traces, except of course that once we're in the Python code of 'apport', things have unquestionably already gone to Hell. Maybe someone who's familiar with the code will have a better

[Touch-packages] [Bug 1690485] Re: openssh-server SIGSYS with 'UsePrivilegeSeparation sandbox'

2017-10-26 Thread KEVIN KENNY
The plot thickens. The configuration of the build appears to be partially implicated. Could it be that with your ./configure flags, it's failing to find a failing PAM or something? When I build with the ./configure that you suggested, it works. When I build with dpkg-buildpackage, on the same

[Touch-packages] [Bug 1690485] Re: openssh-server SIGSYS with 'UsePrivilegeSeparation sandbox'

2017-10-25 Thread KEVIN KENNY
OK, I think I've followed instructions here. I built with the '#define SANDBOX_SECCOMP_FILTER_DEBUG 1' uncommented. Recalling at long last that Ubuntu is Debian (I use Red Hat/CentOS at work and get them confused), I used 'dpkg-buildpackage -rfakeroot -uc -b' to do the build; hope that's OK. I

[Touch-packages] [Bug 1690485] Re: openssh-server SIGSYS with 'UsePrivilegeSeparation sandbox'

2017-10-24 Thread KEVIN KENNY
Upgraded to 17.10. Uninstalled and reinstalled openssh-client, openssh- server (including loading a fresh /usr/etc/ssh directory). Still fails. I attach the output of: sudo strace -f -e trace=socket /usr/sbin/sshd -d 2>&1 | tee sshd.result.txt All the other configuration is as before. What

[Touch-packages] [Bug 1690485] Re: openssh-server SIGSYS with 'UsePrivilegeSeparation sandbox'

2017-10-24 Thread KEVIN KENNY
Oh, another note: changing the UsePrivilegeSeparation setting no longer works. It reports that the setting is deprecated and ignores it. This leaves me without a workaround. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to

[Touch-packages] [Bug 1708882] [NEW] package libfftw3-doc (not installed) failed to install/upgrade: trying to overwrite '/usr/share/info/fftw3.info.gz', which is also in package imgcnv 1.66

2017-08-05 Thread KEVIN KENNY
Public bug reported: apparent conflict with package 'imgcnv' - no idea who's right. $ sudo apt install libfftw3-3 libfftw3-dev libfftw3-doc Reading package lists... Done Building dependency tree Reading state information... Done libfftw3-3 is already the newest version (3.3.5-3).

[Touch-packages] [Bug 1690485] Re: openssh-server SIGSYS with 'UsePrivilegeSeparation sandbox'

2017-05-15 Thread KEVIN KENNY
Here's the output of 'ssh -v localhost' when authorization is failing ** Attachment added: "Output of 'ssh -v localhost'" https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/1690485/+attachment/4877135/+files/sshclient.txt -- You received this bug notification because you are a member of

[Touch-packages] [Bug 1690485] Re: openssh-server SIGSYS with 'UsePrivilegeSeparation sandbox'

2017-05-15 Thread KEVIN KENNY
And here's /etc/ssh/sshd_config on which authorization is failing. ** Attachment added: "/etc/ssh/sshd_config" https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/1690485/+attachment/4877150/+files/sshd_config ** Changed in: openssh (Ubuntu) Status: Incomplete => New -- You

[Touch-packages] [Bug 1690485] Re: openssh-server SIGSYS with 'UsePrivilegeSeparation sandbox'

2017-05-15 Thread KEVIN KENNY
Here's /var/log/syslog from the ssh daemon restart through the authorization failure ** Attachment added: "/var/log/syslog" https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/1690485/+attachment/4877134/+files/syslog.txt -- You received this bug notification because you are a member of

[Touch-packages] [Bug 1690485] Re: openssh-server SIGSYS with 'UsePrivilegeSeparation sandbox'

2017-05-15 Thread KEVIN KENNY
I reset /etc/ssh/sshd_config to the attached version, and attempted ssh -v localhost while logged in as username=kennykb uid=117 The output of 'ssh -v' is attached as 'sshclient.txt'. The only lines that appeared in syslog after I restarted the daemon were in the attached 'syslog.txt'. The

[Touch-packages] [Bug 1690485] [NEW] openssh-server SIGSYS with 'UsePrivilegeSeparation sandbox'

2017-05-12 Thread KEVIN KENNY
Public bug reported: The 'sshd' process gets 'authentication failure' and refuses to allow any login. dmesg indicates that the problem is SIGSYS on a call to 'socket' (syscall #41, signal #31). On a hunch, I decided to test whether the problem is related to 'seccomp' and changed