Looks like the change was in kernel 3.6:
/proc/sys/fs/protected_hardlinks
http://man7.org/linux/man-pages/man5/proc.5.html
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/565002
Title:
ldopen failing
Certainly Tavis's original attack is impossible, since you can't create
the hardlink:
$ ln /bin/ping /tmp/target
ln: failed to create hard link '/tmp/target' => '/bin/ping': Operation not
permitted
I don't know when the change was made to prevent hard-linking files the user
doesn't own, but
This is the commit that added the protection:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=800179c9b8a1e796e441674776d11cd4c05d61d7
Ubuntu must turn it on by default.
The risk, without that kernel option turned on, is:
1. High priv (setuid etc) binary with
I've managed to hack something together for a launcher:
https://github.com/paperclip/origin_experiment/tree/launcher
The main pain point is that you have to put the permission in both the
inheritable set, and the ambient set before it'll get passed to the new
process (that can use $ORIGIN).
--
I've created a git repo to reproduce this issue without using ldopen:
https://github.com/paperclip/origin_experiment
However it now looks like this might be deliberate behaviour:
https://seclists.org/fulldisclosure/2010/Oct/257
Tavis says that expanding $ORIGIN allows attacks against SUID
I have something very similar on Ubuntu 18.04 where the RUNPATH in the
binary isn't working for normal linking.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/565002
Title:
ldopen failing with
apt-get -f install worked once I'd remounted /boot
I guess it would be nicer to report the problem more clearly, but I've
resolved it for me.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1709554
Public bug reported:
apt upgrade - not sure what failed.
Errors were encountered while processing:
/var/cache/apt/archives/linux-image-4.4.0-89-generic_4.4.0-89.112_i386.deb
E: Sub-process /usr/bin/dpkg returned an error code (1)
# lsb_release -rd
Description:Ubuntu 16.04.3 LTS
Release:
[38464.903593] EXT4-fs error (device sda5): ext4_find_entry:1450: inode #2:
comm dpkg: reading directory lblock 0
[38464.974734] EXT4-fs error (device sda5): ext4_find_entry:1450: inode #2:
comm postrm: reading directory lblock 0
[38464.974881] EXT4-fs error (device sda5): ext4_find_entry:1450:
I'm not sure what happened - maybe sda became sdb during a
hibernate/sleep cycle?
umount/e2fsck/mount seems to have mounted rw, and I'm now trying the
install again.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
/dev/sda5 on /boot type ext4 (ro,relatime,data=ordered)
Does look like /boot is mounted ro - but I don't remember doing that
explicitly.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1709554
Title:
Still in 12.04 as well.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/52534
Title:
@ sign (ASCII 64) received via synergy transformed into Ω (unicode
03A9) on output
To manage
Work around from superuser: http://superuser.com/questions/77734
/synergy-linux-keyboard-problem
xmodmap -e keycode 24 = q Q at at at at
on the client.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
Any idea when it will go for general release? I'm looking forward to
having useful load averages again.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/985661
Title:
High load average
To manage
I can still reproduce the issue:
Setup synergy with the Ubuntu 12.04 machine as master, Windows 7 machine as
slave.
super set as Key to show the launcher in CompizConfig Settings Manager.
(default)
Go onto the Windows desktop.
Press the Windows key (super).
Windows start menu displayed.
Looking at the 3.2.0-22 changelog: '* Revert sched: tg-se-load
should be initialised to tg-shares' looks to me like it could be a
candidate for the cause?
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
One way around the problem might be to change your sources.list to a
different country, so that apt-get is forced to download the whole file.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/798023
Public bug reported:
Just installing updates.
$ lsb_release -rd
Description:Ubuntu 10.04.1 LTS
Release:10.04
$ apt-cache policy openjdk-6-jre-headless
openjdk-6-jre-headless:
Installed: 6b18-1.8-0ubuntu2
Candidate: 6b18-1.8-4ubuntu3
Version table:
6b18-1.8-4ubuntu3 0
** Attachment added: AptOrdering.txt
http://launchpadlibrarian.net/52228497/AptOrdering.txt
** Attachment added: Dependencies.txt
http://launchpadlibrarian.net/52228498/Dependencies.txt
** Attachment added: Df.txt
http://launchpadlibrarian.net/52228499/Df.txt
** Attachment added:
19 matches
Mail list logo
