[Bug 1013012] Re: regression with sendmail and Android clients

2022-05-23 Thread Kees Cook
No current issues with modern android and modern ubuntu

** Changed in: openssl (Ubuntu)
   Status: Incomplete => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1013012

Title:
  regression with sendmail and Android clients

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1013012/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1972043] Re: Please add -ftrivial-auto-var-init=zero to default build flags

2022-05-12 Thread Kees Cook
Adding it to the compiler means *all* builds benefit, which is the
reason this was done on the other options. People build their local
projects, newer versions of tools from GitHub, etc etc.

This needs to be in the compiler directly.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1972043

Title:
  Please add -ftrivial-auto-var-init=zero to default build flags

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dpkg/+bug/1972043/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1972043] Re: Please add -ftrivial-auto-var-init=zero to default build flags

2022-05-07 Thread Kees Cook
Yes, -Wuninitialized continues to warn, even if they were auto-
initialized.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1972043

Title:
  Please add -ftrivial-auto-var-init=zero to default build flags

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gcc-12/+bug/1972043/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1972043] [NEW] Please add -ftrivial-auto-var-init=zero to default build flags

2022-05-06 Thread Kees Cook
Public bug reported:

Please add "-ftrivial-auto-var-init=zero" for GCC 12 (which is the first
release of GCC to provide this flag).

It goes well with the other important security flaw mitigation flags already 
enabled in Ubuntu for GCC:
https://wiki.ubuntu.com/ToolChain/CompilerFlags

While many variables are initialized (due to -Wuninitialized), there is
a blind spot for variables passed by reference, padding, and cases where
-Wuninitialized just fails to track it. Universally wiping the variables
eliminates nearly the entire class of uninitialized stack variable use
(https://cwe.mitre.org/data/definitions/457.html) with nearly no
overhead (e.g. any duplicate assignments will already be squashed during
dead store elimination, etc).

** Affects: gcc-12 (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1972043

Title:
  Please add -ftrivial-auto-var-init=zero to default build flags

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gcc-12/+bug/1972043/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1814012] Re: netplan type wifis needs a device option

2021-10-12 Thread Kees Cook
See https://github.com/canonical/netplan/pull/240

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1814012

Title:
  netplan type wifis needs a device option

To manage notifications about this bug go to:
https://bugs.launchpad.net/netplan/+bug/1814012/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1814012] Re: netplan type wifis needs a device option

2021-10-12 Thread Kees Cook
For example, fallback (-Dnl80211,wext) is used for the wpa_supplicant systemd 
service:

https://salsa.debian.org/debian/wpa/-/blob/debian/unstable/debian/patches/networkd-
driver-fallback.patch

But it isn't present in the netplan networkd renderer.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1814012

Title:
  netplan type wifis needs a device option

To manage notifications about this bug go to:
https://bugs.launchpad.net/netplan/+bug/1814012/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1814012] Re: netplan type wifis needs a device option

2021-10-12 Thread Kees Cook
> What is the range of possible values for this -D option, and why would
you ever want to specify it in the netplan yaml instead of inferring it?

It would be best if wpa_supplicant selected the correct driver, but it
seems it doesn't do a good job with this. It does support fallbacks,
though, which seems like a reasonable default behavior for
wpa_supplicant ("-Dnl80211,wext"), but sometimes different drivers have
different behaviors/abilities, so explicitly choosing one is useful.

I see two issues:
- wpa_supplicant makes no attempt to automatically pick a working driver
- netplan doesn't have a way to choose a driver if wpa_supplicant's default 
(nl80211) doesn't work

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1814012

Title:
  netplan type wifis needs a device option

To manage notifications about this bug go to:
https://bugs.launchpad.net/netplan/+bug/1814012/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1943049] Re: Docker ubuntu:impish: Problem executing scripts DPkg::Post-Invoke 'rm -f /var/cache/apt/archives/*.deb /var/cache/apt/archives/partial/*.deb /var/cache/apt/*.bin || true'

2021-09-09 Thread Kees Cook
Host dockers need this:
https://github.com/moby/moby/pull/42681

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1943049

Title:
  Docker ubuntu:impish: Problem executing scripts DPkg::Post-Invoke 'rm
  -f /var/cache/apt/archives/*.deb /var/cache/apt/archives/partial/*.deb
  /var/cache/apt/*.bin || true'

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-images/+bug/1943049/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1943049] Re: Docker ubuntu:impish: Problem executing scripts DPkg::Post-Invoke 'rm -f /var/cache/apt/archives/*.deb /var/cache/apt/archives/partial/*.deb /var/cache/apt/*.bin || true'

2021-09-09 Thread Kees Cook
I hit this too. Host is hirsute.

It went so far as blowing up docker itself, with:

runtime/cgo: pthread_create failed: Operation not permitted

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1943049

Title:
  Docker ubuntu:impish: Problem executing scripts DPkg::Post-Invoke 'rm
  -f /var/cache/apt/archives/*.deb /var/cache/apt/archives/partial/*.deb
  /var/cache/apt/*.bin || true'

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-images/+bug/1943049/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1892145] Re: [SRU] smbclient cannot connect anonymously in Kerberos context (freeipa)

2021-08-22 Thread Kees Bakker
Sorry for not responding sooner. I'm away from that system where I first
experienced the problem. I'll be able to test it not sooner than early
September.

Besides that, I have a setup (with LXC containers). Unfortunately I
can't reproduce the initial problem in this setup.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1892145

Title:
  [SRU] smbclient cannot connect anonymously in Kerberos context
  (freeipa)

To manage notifications about this bug go to:
https://bugs.launchpad.net/samba/+bug/1892145/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1360912] Re: ScanTool included on the repos does not connect

2021-07-14 Thread Kees Cook
Version 2.1 works with clones and presents a correct list of ports.
Please open a new bug if problems persist. :)

** Changed in: scantool (Ubuntu)
   Status: Confirmed => Won't Fix

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1360912

Title:
  ScanTool included on the repos does not connect

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/scantool/+bug/1360912/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1904990] Re: Missing i386 version of libnss-sss

2021-05-31 Thread Kees Bakker
What's the progress on this?

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1904990

Title:
  Missing i386 version of libnss-sss

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1904990/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Re: [Bug 1928385] Re: The systemd process runs twice, somehow preventing the system from getting to proper GUI login screen. I kill the higher number PID from a getty, and then my system boots properl

2021-05-17 Thread Kees-Jan Hermans
No, this bug was submitted from the GUI. By that point, I'd already killed
the second systemd. You could say I have a chicken and egg problem.

On Mon, May 17, 2021, 14:30 Dan Streetman <1928...@bugs.launchpad.net>
wrote:

> I don't see anywhere in your dmesg where systemd is 'running twice', you
> probably should attach your boot/journal logs that show the problem.
>
> ** Changed in: systemd (Ubuntu)
>Status: New => Incomplete
>
> --
> You received this bug notification because you are subscribed to the bug
> report.
> https://bugs.launchpad.net/bugs/1928385
>
> Title:
>   The systemd process runs twice, somehow preventing the system from
>   getting to proper GUI login screen. I kill the higher number PID from
>   a getty, and then my system boots properly.
>
> Status in systemd package in Ubuntu:
>   Incomplete
>
> Bug description:
>   The summary says all. The systemd process runs twice, somehow
>   preventing the system from getting to proper GUI login screen. My
>   screen stays dark, I jump to a getty using Alt-F2. I log in on the
>   terminal, take a list of running processes, I kill the higher number
>   PID from a getty, and then my system boots properly.
>
>   ProblemType: Bug
>   DistroRelease: Ubuntu 20.04
>   Package: systemd 245.4-4ubuntu3.6
>   ProcVersionSignature: Ubuntu 5.8.0-53.60~20.04.1-generic 5.8.18
>   Uname: Linux 5.8.0-53-generic x86_64
>   ApportVersion: 2.20.11-0ubuntu27.16
>   Architecture: amd64
>   CasperMD5CheckResult: skip
>   CurrentDesktop: XFCE
>   Date: Thu May 13 22:13:54 2021
>   InstallationDate: Installed on 2021-01-15 (118 days ago)
>   InstallationMedia: Ubuntu 20.04.1 LTS "Focal Fossa" - Release amd64
> (20200731)
>   Lsusb:
>Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
>Bus 001 Device 003: ID 046d:c30e Logitech, Inc. UltraX Keyboard (Y-BL49)
>Bus 001 Device 002: ID 046d:c077 Logitech, Inc. M105 Optical Mouse
>Bus 001 Device 004: ID 05e3:0608 Genesys Logic, Inc. Hub
>Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
>   MachineType: Gigabyte Technology Co., Ltd. To be filled by O.E.M.
>   ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-5.8.0-53-generic
> root=UUID=854a0e43-544b-49d8-818f-d285989bdbc1 ro quiet splash vt.handoff=7
>   SourcePackage: systemd
>   SystemdDelta:
>[MASKED] /etc/systemd/system/samba-ad-dc.service →
> /usr/lib/systemd/system/samba-ad-dc.service
>[EXTENDED]   /usr/lib/systemd/system/rc-local.service →
> /usr/lib/systemd/system/rc-local.service.d/debian.conf
>[EXTENDED]   /usr/lib/systemd/system/user@.service →
> /usr/lib/systemd/system/user@.service.d/timeout.conf
>
>3 overridden configuration files found.
>   UpgradeStatus: No upgrade log present (probably fresh install)
>   dmi.bios.date: 03/16/2016
>   dmi.bios.release: 5.6
>   dmi.bios.vendor: American Megatrends Inc.
>   dmi.bios.version: F4
>   dmi.board.asset.tag: To be filled by O.E.M.
>   dmi.board.name: H110M-S2H-CF
>   dmi.board.vendor: Gigabyte Technology Co., Ltd.
>   dmi.board.version: x.x
>   dmi.chassis.asset.tag: To Be Filled By O.E.M.
>   dmi.chassis.type: 3
>   dmi.chassis.vendor: To Be Filled By O.E.M.
>   dmi.chassis.version: To Be Filled By O.E.M.
>   dmi.modalias:
> dmi:bvnAmericanMegatrendsInc.:bvrF4:bd03/16/2016:br5.6:svnGigabyteTechnologyCo.,Ltd.:pnTobefilledbyO.E.M.:pvrTobefilledbyO.E.M.:rvnGigabyteTechnologyCo.,Ltd.:rnH110M-S2H-CF:rvrx.x:cvnToBeFilledByO.E.M.:ct3:cvrToBeFilledByO.E.M.:
>   dmi.product.family: To be filled by O.E.M.
>   dmi.product.name: To be filled by O.E.M.
>   dmi.product.sku: To be filled by O.E.M.
>   dmi.product.version: To be filled by O.E.M.
>   dmi.sys.vendor: Gigabyte Technology Co., Ltd.
>
> To manage notifications about this bug go to:
>
> https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1928385/+subscriptions
>

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1928385

Title:
  The systemd process runs twice, somehow preventing the system from
  getting to proper GUI login screen. I kill the higher number PID from
  a getty, and then my system boots properly.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1928385/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1928385] [NEW] The systemd process runs twice, somehow preventing the system from getting to proper GUI login screen. I kill the higher number PID from a getty, and then my system boots properly.

2021-05-13 Thread Kees-Jan Hermans
Public bug reported:

The summary says all. The systemd process runs twice, somehow preventing
the system from getting to proper GUI login screen. My screen stays
dark, I jump to a getty using Alt-F2. I log in on the terminal, take a
list of running processes, I kill the higher number PID from a getty,
and then my system boots properly.

ProblemType: Bug
DistroRelease: Ubuntu 20.04
Package: systemd 245.4-4ubuntu3.6
ProcVersionSignature: Ubuntu 5.8.0-53.60~20.04.1-generic 5.8.18
Uname: Linux 5.8.0-53-generic x86_64
ApportVersion: 2.20.11-0ubuntu27.16
Architecture: amd64
CasperMD5CheckResult: skip
CurrentDesktop: XFCE
Date: Thu May 13 22:13:54 2021
InstallationDate: Installed on 2021-01-15 (118 days ago)
InstallationMedia: Ubuntu 20.04.1 LTS "Focal Fossa" - Release amd64 (20200731)
Lsusb:
 Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
 Bus 001 Device 003: ID 046d:c30e Logitech, Inc. UltraX Keyboard (Y-BL49)
 Bus 001 Device 002: ID 046d:c077 Logitech, Inc. M105 Optical Mouse
 Bus 001 Device 004: ID 05e3:0608 Genesys Logic, Inc. Hub
 Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
MachineType: Gigabyte Technology Co., Ltd. To be filled by O.E.M.
ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-5.8.0-53-generic 
root=UUID=854a0e43-544b-49d8-818f-d285989bdbc1 ro quiet splash vt.handoff=7
SourcePackage: systemd
SystemdDelta:
 [MASKED] /etc/systemd/system/samba-ad-dc.service → 
/usr/lib/systemd/system/samba-ad-dc.service
 [EXTENDED]   /usr/lib/systemd/system/rc-local.service → 
/usr/lib/systemd/system/rc-local.service.d/debian.conf
 [EXTENDED]   /usr/lib/systemd/system/user@.service → 
/usr/lib/systemd/system/user@.service.d/timeout.conf
 
 3 overridden configuration files found.
UpgradeStatus: No upgrade log present (probably fresh install)
dmi.bios.date: 03/16/2016
dmi.bios.release: 5.6
dmi.bios.vendor: American Megatrends Inc.
dmi.bios.version: F4
dmi.board.asset.tag: To be filled by O.E.M.
dmi.board.name: H110M-S2H-CF
dmi.board.vendor: Gigabyte Technology Co., Ltd.
dmi.board.version: x.x
dmi.chassis.asset.tag: To Be Filled By O.E.M.
dmi.chassis.type: 3
dmi.chassis.vendor: To Be Filled By O.E.M.
dmi.chassis.version: To Be Filled By O.E.M.
dmi.modalias: 
dmi:bvnAmericanMegatrendsInc.:bvrF4:bd03/16/2016:br5.6:svnGigabyteTechnologyCo.,Ltd.:pnTobefilledbyO.E.M.:pvrTobefilledbyO.E.M.:rvnGigabyteTechnologyCo.,Ltd.:rnH110M-S2H-CF:rvrx.x:cvnToBeFilledByO.E.M.:ct3:cvrToBeFilledByO.E.M.:
dmi.product.family: To be filled by O.E.M.
dmi.product.name: To be filled by O.E.M.
dmi.product.sku: To be filled by O.E.M.
dmi.product.version: To be filled by O.E.M.
dmi.sys.vendor: Gigabyte Technology Co., Ltd.

** Affects: systemd (Ubuntu)
 Importance: Undecided
 Status: New


** Tags: amd64 apport-bug focal

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1928385

Title:
  The systemd process runs twice, somehow preventing the system from
  getting to proper GUI login screen. I kill the higher number PID from
  a getty, and then my system boots properly.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1928385/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1914685] Re: Please enable CONFIG_UBSAN_BOUNDS

2021-02-04 Thread Kees Cook
This is a CONFIG request, do no apport collection required. :)

** Changed in: linux (Ubuntu)
   Status: Incomplete => Confirmed

** Also affects: linux (Ubuntu Groovy)
   Importance: Undecided
   Status: New

** Also affects: linux (Ubuntu Hirsute)
   Importance: Undecided
   Status: Confirmed

** Changed in: linux (Ubuntu Groovy)
   Status: New => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1914685

Title:
  Please enable CONFIG_UBSAN_BOUNDS

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1914685/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1914685] [NEW] Please enable CONFIG_UBSAN_BOUNDS

2021-02-04 Thread Kees Cook
Public bug reported:

Enabling CONFIG_UBSAN_BOUNDS is fast and provides good coverage for out-
of-bounds array indexing (i.e. it catchings the things that
CONFIG_FORTIFY doesn't).

** Affects: linux (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1914685

Title:
  Please enable CONFIG_UBSAN_BOUNDS

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1914685/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1892145] Re: smbclient cannot connect anonymously in Kerberos context (freeipa)

2021-02-04 Thread Kees Bakker
In /etc/krb5.conf.d/freeipa there is

[libdefaults]
spake_preauth_groups = edwards25519

And in /var/lib/sss/pubconf/krb5.include.d there is the following

$ more /var/lib/sss/pubconf/krb5.include.d/*|cat
::
/var/lib/sss/pubconf/krb5.include.d/domain_realm_ghs_nl
::
[domain_realm]
::
/var/lib/sss/pubconf/krb5.include.d/krb5_libdefaults
::
[libdefaults]
 canonicalize = true
::
/var/lib/sss/pubconf/krb5.include.d/localauth_plugin
::
[plugins]
 localauth = {
  module = 
sssd:/usr/lib/x86_64-linux-gnu/sssd/modules/sssd_krb5_localauth_plugin.so
 }

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1892145

Title:
  smbclient cannot connect anonymously in Kerberos context (freeipa)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1892145/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1892145] Re: smbclient cannot connect anonymously in Kerberos context (freeipa)

2021-01-25 Thread Kees Bakker
In /etc/krb5.conf.d/freeipa there is

[libdefaults]
spake_preauth_groups = edwards25519

And in /var/lib/sss/pubconf/krb5.include.d there is the following

$ more /var/lib/sss/pubconf/krb5.include.d/*|cat
::
/var/lib/sss/pubconf/krb5.include.d/domain_realm_ghs_nl
::
[domain_realm]
::
/var/lib/sss/pubconf/krb5.include.d/krb5_libdefaults
::
[libdefaults]
 canonicalize = true
::
/var/lib/sss/pubconf/krb5.include.d/localauth_plugin
::
[plugins]
 localauth = {
  module = 
sssd:/usr/lib/x86_64-linux-gnu/sssd/modules/sssd_krb5_localauth_plugin.so
 }

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1892145

Title:
  smbclient cannot connect anonymously in Kerberos context (freeipa)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1892145/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1912043] Re: grub2 fails to install/probe into md device when drives have moved around

2021-01-16 Thread Kees Cook
** Summary changed:

- grub2 fails to install/probe into md device with first drive not active (i.e. 
hot spare)
+ grub2 fails to install/probe into md device when drives have moved around

** Description changed:

  grub2 appears to _sometimes_ ignore md devices with a hot spare:
  
  $ cat /proc/mdstat
- Personalities : [raid1] [linear] [multipath] [raid0] [raid6] [raid5] [raid4] 
[raid10] 
- md5 : active raid1 sda2[2](S) sdb2[3] sde2[4]
-   2925939136 blocks super 1.2 [2/2] [UU]
-   bitmap: 2/22 pages [8KB], 65536KB chunk
+ Personalities : [raid1] [linear] [multipath] [raid0] [raid6] [raid5] [raid4] 
[raid10]
+ md5 : active raid1 sda2[0](S) sdb2[1] sde2[2]
+   2925939136 blocks super 1.2 [2/2] [UU]
+   bitmap: 2/22 pages [8KB], 65536KB chunk
  
  md6 : active raid1 sdf2[0] sdd2[2](S) sdk2[1]
-   3902691136 blocks super 1.2 [2/2] [UU]
-   bitmap: 1/30 pages [4KB], 65536KB chunk
+   3902691136 blocks super 1.2 [2/2] [UU]
+   bitmap: 1/30 pages [4KB], 65536KB chunk
  
  unused devices: 
  
  $ sudo grub-probe -vvv / 2>&1 | grep -E 'info: Inserting md/|error'
  grub-probe: info: Inserting md/6 (+0,7805382272) into systemvg (lvm)
  grub-probe: error: disk 
`lvmid/5R9E1M-V0xL-pEsR-74zV-3oOm-JorM-hb2Erw/WHUtMx-lZcd-2RmH-WVSk-Z0Et-qiqS-hFBd4u'
 not found.
  
  If I remove the hotspare from md5, everything works normally and I can
- install grub again. But md6 has a spare too... ?!
+ install grub again.
+ 
+ And if devices have moved around enough internally that the internal
+ index doesn't match the max count any more, they also become invisible
+ to grub. For example:
+ 
+ $ cat /proc/mdstat
+ Personalities : [raid1] [linear] [multipath] [raid0] [raid6] [raid5] [raid4] 
[raid10]
+ md5 : active raid1 sdb2[3] sde2[4]
+   2925939136 blocks super 1.2 [2/2] [UU]
+   bitmap: 2/22 pages [8KB], 65536KB chunk
+ 
+ Note the "[3]" and "[4]". Unlike mdadm, grub was not checking beyond the
+ array size. This needs fixing as well.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1912043

Title:
  grub2 fails to install/probe into md device when drives have moved
  around

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1912043/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1912043] Re: grub2 fails to install/probe into md device with first drive not active (i.e. hot spare)

2021-01-16 Thread Kees Cook
Also need to fix the indexing.

** Patch added: "fix-md-array-enumeration.patch"
   
https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1912043/+attachment/5453745/+files/fix-md-array-enumeration.patch

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1912043

Title:
  grub2 fails to install/probe into md device when drives have moved
  around

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1912043/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1912043] Re: grub2 fails to install/probe into md device with first drive not active (i.e. hot spare)

2021-01-16 Thread Kees Cook
https://savannah.gnu.org/bugs/index.php?59887

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1912043

Title:
  grub2 fails to install/probe into md device with first drive not
  active (i.e. hot spare)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1912043/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1912043] Re: grub2 fails to install/probe into md device with first drive not active (i.e. hot spare)

2021-01-16 Thread Kees Cook
** Patch added: "fix-md-array-list-truncation.patch"
   
https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1912043/+attachment/5453655/+files/fix-md-array-list-truncation.patch

** Bug watch added: GNU Savannah Bug Tracker #59887
   http://savannah.gnu.org/bugs/?59887

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1912043

Title:
  grub2 fails to install/probe into md device with first drive not
  active (i.e. hot spare)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1912043/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1912043] Re: grub2 fails to install/probe into md device with first drive not active (i.e. hot spare)

2021-01-16 Thread Kees Cook
** Summary changed:

- grub2 fails to install/probe into md device with hot spare
+ grub2 fails to install/probe into md device with first drive not active (i.e. 
hot spare)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1912043

Title:
  grub2 fails to install/probe into md device with first drive not
  active (i.e. hot spare)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1912043/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1912043] [NEW] grub2 fails to install/probe into md device with hot spare

2021-01-16 Thread Kees Cook
Public bug reported:

grub2 appears to _sometimes_ ignore md devices with a hot spare:

$ cat /proc/mdstat
Personalities : [raid1] [linear] [multipath] [raid0] [raid6] [raid5] [raid4] 
[raid10] 
md5 : active raid1 sda2[2](S) sdb2[3] sde2[4]
  2925939136 blocks super 1.2 [2/2] [UU]
  bitmap: 2/22 pages [8KB], 65536KB chunk

md6 : active raid1 sdf2[0] sdd2[2](S) sdk2[1]
  3902691136 blocks super 1.2 [2/2] [UU]
  bitmap: 1/30 pages [4KB], 65536KB chunk

unused devices: 

$ sudo grub-probe -vvv / 2>&1 | grep -E 'info: Inserting md/|error'
grub-probe: info: Inserting md/6 (+0,7805382272) into systemvg (lvm)
grub-probe: error: disk 
`lvmid/5R9E1M-V0xL-pEsR-74zV-3oOm-JorM-hb2Erw/WHUtMx-lZcd-2RmH-WVSk-Z0Et-qiqS-hFBd4u'
 not found.

If I remove the hotspare from md5, everything works normally and I can
install grub again. But md6 has a spare too... ?!

** Affects: grub2 (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1912043

Title:
  grub2 fails to install/probe into md device with hot spare

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1912043/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1475337] Re: grub-probe can't probe large logical volumes (LVM)

2021-01-15 Thread Kees Cook
This particular problem appears fixed is latest grub2, though I'm seeing
a similar failure, which may need a new bug report.

** Also affects: grub2 (Ubuntu Precise)
   Importance: Undecided
   Status: New

** Changed in: grub2 (Ubuntu)
   Status: New => Fix Released

** Bug watch added: GNU Savannah Bug Tracker #45562
   http://savannah.gnu.org/bugs/?45562

** Also affects: grub via
   http://savannah.gnu.org/bugs/?45562
   Importance: Unknown
   Status: Unknown

** Changed in: grub2 (Ubuntu Precise)
   Status: New => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1475337

Title:
  grub-probe can't probe large logical volumes (LVM)

To manage notifications about this bug go to:
https://bugs.launchpad.net/grub/+bug/1475337/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1027363] Re: grub-install fails with "out of disk" error

2021-01-15 Thread Kees Cook
*** This bug is a duplicate of bug 1475337 ***
https://bugs.launchpad.net/bugs/1475337

** This bug has been marked a duplicate of bug 1475337
   grub-probe can't probe large logical volumes (LVM)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1027363

Title:
  grub-install fails with "out of disk" error

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1027363/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1904990] Re: Missing i386 version of libnss-sss

2021-01-15 Thread Kees Bakker
Hi Timo,

Any news on this?

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1904990

Title:
  Missing i386 version of libnss-sss

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1904990/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1821415] Re: pkexec fails in a non-graphical environment

2021-01-04 Thread Kees Bakker
Can we raise the importance please? It is quite essential to let
unprivileged users run certain commands, even if there is not GUI.

Also, it is very confusing when everything is configured correctly, plus
the password is correct, and then to get the message "Not authorized",
"This incident has been reported."

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1821415

Title:
  pkexec fails in a non-graphical environment

To manage notifications about this bug go to:
https://bugs.launchpad.net/policykit-1/+bug/1821415/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1466150] Re: grub-install breaks when ESP is on raid

2020-11-29 Thread Kees Cook
(This may have only been present on older firmware versions, though, as
I no longer see the behavior on a newer T30.)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1466150

Title:
  grub-install breaks when ESP is on raid

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub-installer/+bug/1466150/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1466150] Re: grub-install breaks when ESP is on raid

2020-11-29 Thread Kees Cook
https://outflux.net/blog/archives/2018/04/19/uefi-booting-and-raid1/

The UEFI on the Dell T30 I was testing on would write a "boot variable
cache" file to the ESP. :(

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1466150

Title:
  grub-install breaks when ESP is on raid

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub-installer/+bug/1466150/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1466150] Re: grub-install breaks when ESP is on raid

2020-11-29 Thread Kees Cook
The only reference I could find was
https://github.com/tianocore/tianocore.github.io/wiki/UEFI-Variable-
Runtime-Cache which hints at a "device storage" for variables...

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1466150

Title:
  grub-install breaks when ESP is on raid

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub-installer/+bug/1466150/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1905975] Re: kernel: Enable CONFIG_BPF_LSM on Ubuntu

2020-11-27 Thread Kees Cook
(This is a feature request, so no log needed.)

** Changed in: linux (Ubuntu)
   Status: Incomplete => Confirmed

** Also affects: linux (Ubuntu Hirsute)
   Importance: Undecided
   Status: Confirmed

** Also affects: linux (Ubuntu Groovy)
   Importance: Undecided
   Status: New

** Changed in: linux (Ubuntu Groovy)
   Status: New => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1905975

Title:
  kernel: Enable CONFIG_BPF_LSM on Ubuntu

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1905975/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1904990] Re: Missing i386 version of libnss-sss

2020-11-21 Thread Kees Bakker
What would it take to build the deb myself? I know how to build
packages, but not how to build a i386 deb on my amd64 machine.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1904990

Title:
  Missing i386 version of libnss-sss

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1904990/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1904990] Re: Missing i386 version of libnss-sss

2020-11-20 Thread Kees Bakker
Commercial tools such as the Green Hills compilers. Of course there are
updates, but sometimes it is not possible, or allowed to upgrade due to
safety restrictions.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1904990

Title:
  Missing i386 version of libnss-sss

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1904990/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1904990] [NEW] Missing i386 version of libnss-sss

2020-11-20 Thread Kees Bakker
Public bug reported:

In Ubuntu 20.04 there is no i386 support of libnss-sss anymore. Now
certain (older) programs don't work anymore in an environment with SSSD.

I'd like to request to bring the i386 support back to life.

** Affects: sssd (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1904990

Title:
  Missing i386 version of libnss-sss

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1904990/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1892526] Re: dpkg-reconfigure grub-pc no longer prompts for grub-pc/install_devices

2020-11-04 Thread Kees Cook
I can confirm this fixes the issue on Bionic on amd64. Thanks for the
SRU!

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1892526

Title:
  dpkg-reconfigure grub-pc no longer prompts for grub-pc/install_devices

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1892526/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1846947] Re: No profiling support

2020-10-11 Thread Kees van Vloten
ad 1,2) Ubuntu provides both Netdata and Samba. Unfortunately the
integration between the two is missing and therefor Netdata is currently
unable to monitor Samba resources.

For Netdata to monitor Samba it runs 'smbstatus -P', however this option
is only available when Samba is compiled with support for profiling and
when the option 'smbd profiling level = on' is specified in smb.conf

ad 3) This issue can indeed be solved by Debian, indeed the most logical
way to go forward is to create an upstream issue.

ad 4) From Samba 2.2.5 release notes (18th June 2002): 
With samba compiled for profile data collection, you may see
a very slight degradation in performance even with profiling
collection turned off. On initial tests with NetBench on an
SGI Origin 200 server, this degradation was not measurable 
with profile collection off compared to no profile collection
compiled into samba.

With count profile collection enabled on all clients, the 
degradation was less than 2%. With full profile collection 
enabled on all clients, the degradation was about 8.5%.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1846947

Title:
  No profiling support

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1846947/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1892145] Re: smbclient cannot connect anonymously in Kerberos context (freeipa)

2020-09-02 Thread Kees Bakker
The /etc/krb5.conf is installed and configured by FreeIPA. See attached
krb5.conf

Indeed it has

[libdefaults]
  default_ccache_name = KEYRING:persistent:%{uid}


** Attachment added: "krb5.conf"
   
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1892145/+attachment/5406950/+files/krb5.conf

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1892145

Title:
  smbclient cannot connect anonymously in Kerberos context (freeipa)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1892145/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1892145] Re: smbclient cannot connect anonymously in Kerberos context (freeipa)

2020-08-25 Thread Kees Bakker
Here is the core dump.

** Attachment added: "Core dump"
   
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1892145/+attachment/5404296/+files/core

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1892145

Title:
  smbclient cannot connect anonymously in Kerberos context (freeipa)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1892145/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1892145] Re: smbclient cannot connect anonymously in Kerberos context (freeipa)

2020-08-24 Thread Kees Bakker
Well, it didn't actually create a core dump. It only said so. I'll see
what I can do to actually create the dump.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1892145

Title:
  smbclient cannot connect anonymously in Kerberos context (freeipa)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1892145/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1892145] Re: smbclient cannot connect anonymously in Kerberos context (freeipa)

2020-08-22 Thread Kees Bakker
A workaround is to confuse smbclient by setting KRB5CCNAME to an unknown
file

 KRB5CCNAME=FILE:/none-existing-file

I just strumbled on a note from Alexander Bokovoy

"... and Samba on Debian/Ubuntu is compiled with Heimdal Kerberos
... Heimdal has no support for KEYRING type"

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1892145

Title:
  smbclient cannot connect anonymously in Kerberos context (freeipa)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1892145/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1892145] Re: smbclient cannot connect anonymously in Kerberos context (freeipa)

2020-08-19 Thread Kees Bakker
There is an option -k, to enable Kerberos. But there is no option to
disable it. Smbclient decides on its own to use Kerberos, and it crashes
(core dumped) while doing so.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1892145

Title:
  smbclient cannot connect anonymously in Kerberos context (freeipa)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1892145/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1892145] [NEW] smbclient cannot connect anonymously in Kerberos context (freeipa)

2020-08-19 Thread Kees Bakker
Public bug reported:

It is not possible anymore to connect anonymously to a Samba server, if
there is a Kerberos environment. It does not matter if there is a valid
Kerberos ticket or not. I'm using FreeIPA.

This is with smbclient 2:4.11.6+dfsg-0ubuntu1.4
For example,

$ smbclient -L '//dist.ghs.nl/space' -N
Failed to resolve credential cache 'KEYRING:persistent:60001'! (Unknown 
credential cache type)
free(): double free detected in tcache 2
Aborted (core dumped)

On Ubuntu 18.04, with smbclient 2:4.7.6+dfsg~ubuntu-0ubuntu2.18 it works
as expected (albeit with many messages about failing krb5_init_context
and smb_krb5_context_init_basic)

The combination Samba + FreeIPA + Ubuntu has never worked since I
started using FreeIPA a few years ago. But anonymous access to a Samba
server did work, until I switched to Ubuntu 20.04.

** Affects: samba (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1892145

Title:
  smbclient cannot connect anonymously in Kerberos context (freeipa)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1892145/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 386558]

2020-07-28 Thread Kees Cook
commit a0f33f996f7986dbf37631a4577f8565b42df29e
Author: Ulrich Drepper 
Date:   Thu Sep 8 19:48:47 2011 -0400

Add range checking for FD_SET, FD_CLR, and FD_ISSET

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/386558

Title:
  RLIMIT_NOFILE > FD_SETSIZE seems to cause select() to corrupt the
  stack

To manage notifications about this bug go to:
https://bugs.launchpad.net/glibc/+bug/386558/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1880250] [NEW] disk check progress no longer visible

2020-05-22 Thread Kees Cook
Public bug reported:

It seems the transition to bgrt lost something with Ubuntu's disk check
details. The only thing I see on my screen during a long disk check is
the "press Ctrl-C to stop all in progress disk checks" with no progress.

** Affects: plymouth (Ubuntu)
 Importance: Undecided
 Status: New


** Tags: champagne rls-ff-incoming rls-gg-incoming

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1880250

Title:
  disk check progress no longer visible

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/plymouth/+bug/1880250/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1868105] Re: No Sound, dummy output in settings

2020-05-04 Thread Kees
I've upgraded my Dell G3-3590 to Ubuntu 20.04 which also fixes the
issue.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1868105

Title:
  No Sound, dummy output in settings

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-oem-osp1/+bug/1868105/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1868105] Re: No Sound, dummy output in settings

2020-04-13 Thread Kees
I tried options snd-hda-intel index=0 model=laptop-dmic in
/etc/modprobe.d/alsa-base.conf, but it did not work for me.

I tried 5.0.0-1047-oem-osp1, but still not fixed.

Then I tried kernel parameter snd_hda_intel.dmic_detect=0, which fixes
the sound output, but the internal microphone now doesn't work, see also
https://bugs.archlinux.org/task/64720.

I've tried snd_hda_intel.dmic_detect=0 on 5.0.0-1040-oem, 1046 and 1047,
and all produce sound output now (although the mic doesn't work, but
plugging in a headset (with mic) gets me a mic and output, if needed).

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1868105

Title:
  No Sound, dummy output in settings

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-oem-osp1/+bug/1868105/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1868105] Re: No Sound, dummy output in settings

2020-04-01 Thread Kees
not fixed with 5.0.0-1046-oem-osp1, reverting back to 5.0.0-1040-oem-
osp1

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1868105

Title:
  No Sound, dummy output in settings

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-oem-osp1/+bug/1868105/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1868105] Re: No Sound, dummy output in settings

2020-03-20 Thread Kees
Oops on 5.3.0.42:

Mar 19 21:00:36 kees-G3-3590 kernel: [5.601338] skl_hda_dsp_generic 
skl_hda_dsp_generic: ASoC: source widget Alt Analog Codec Capture overwritten
Mar 19 21:00:36 kees-G3-3590 kernel: [5.601347] BUG: unable to handle page 
fault for address: 00010067
Mar 19 21:00:36 kees-G3-3590 kernel: [5.601350] #PF: supervisor read access 
in kernel mode
Mar 19 21:00:36 kees-G3-3590 kernel: [5.601351] #PF: error_code(0x) - 
not-present page
Mar 19 21:00:36 kees-G3-3590 kernel: [5.601352] PGD 0 P4D 0
Mar 19 21:00:36 kees-G3-3590 kernel: [5.601355] Oops:  [#1] SMP PTI
Mar 19 21:00:36 kees-G3-3590 kernel: [5.601358] CPU: 4 PID: 587 Comm: 
systemd-udevd Tainted: P   OE 5.3.0-42-generic #34~18.04.1-Ubuntu
Mar 19 21:00:36 kees-G3-3590 kernel: [5.601359] Hardware name: Dell Inc. G3 
3590/061RYD, BIOS 1.8.0 11/11/2019
Mar 19 21:00:36 kees-G3-3590 kernel: [5.601364] RIP: 
0010:skl_hda_hdmi_jack_init+0x3f/0x110 [snd_soc_skl_hda_dsp]

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1868105

Title:
  No Sound, dummy output in settings

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-oem-osp1/+bug/1868105/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1868105] Re: No Sound, dummy output in settings

2020-03-20 Thread Kees
Booting 5.0.0-1040-oem-osp1 fixes the audio problem for me.
Both 5.0.0-1043-oem-osp1 and 5.3.0-42 have the problem.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1868105

Title:
  No Sound, dummy output in settings

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-oem-osp1/+bug/1868105/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1851470] Re: cephfs mounts hangs machine when written to

2019-11-12 Thread Kees Hoekzema
The problem as far as i can tell is that
https://lkml.org/lkml/2019/10/3/862 this revert never got applied to
those kernels. Which makes them unstable.

5.0.0-32+ and 4.15.0-66+ are effected

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1851470

Title:
  cephfs mounts hangs machine when written to

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1851470/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1773859] Re: upgrades to 18.04 fail

2019-09-30 Thread Kees Cook
Hmm, I don't have any systems left with systemd-shim installed, so I
can't do a "real world" test of this. The test case is the description
seems reasonable, so if that passes, I would consider this bug fixed. :)
Thanks!

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1773859

Title:
  upgrades to 18.04 fail

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1773859/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1834253] [NEW] package libglib2.0-0:arm64 2.48.2-0ubuntu4.2 failed to install/upgrade: package libglib2.0-0:arm64 is already installed and configured

2019-06-25 Thread kees de koning
Public bug reported:

happend in upgrade proces

ProblemType: Package
DistroRelease: Ubuntu 16.04
Package: libglib2.0-0:arm64 2.48.2-0ubuntu4.2
Uname: Linux 4.9.118+ aarch64
ApportVersion: 2.20.1-0ubuntu2.18
AptdaemonVersion: 1.1.1+bzr982-0ubuntu14
Architecture: arm64
Date: Tue Jun 25 20:40:58 2019
DuplicateSignature:
 package:libglib2.0-0:arm64:2.48.2-0ubuntu4.2
 Processing triggers for mime-support (3.59ubuntu1) ...
 dpkg: error processing package libglib2.0-0:arm64 (--configure):
  package libglib2.0-0:arm64 is already installed and configured
ErrorMessage: package libglib2.0-0:arm64 is already installed and configured
RelatedPackageVersions:
 dpkg 1.18.4ubuntu1.5
 apt  1.2.32
SourcePackage: dpkg
Title: package libglib2.0-0:arm64 2.48.2-0ubuntu4.2 failed to install/upgrade: 
package libglib2.0-0:arm64 is already installed and configured
UpgradeStatus: No upgrade log present (probably fresh install)

** Affects: dpkg (Ubuntu)
 Importance: Undecided
 Status: New


** Tags: already-installed apport-package arm64 xenial

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1834253

Title:
  package libglib2.0-0:arm64 2.48.2-0ubuntu4.2 failed to
  install/upgrade: package libglib2.0-0:arm64 is already installed and
  configured

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dpkg/+bug/1834253/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1830746] Re: memlock setting in systemd (pid 1) too low for containers (bionic)

2019-05-28 Thread Kees Bos
** Patch added: "fix-memlock-bump.patch"
   
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1830746/+attachment/5267179/+files/fix-memlock-bump.patch

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1830746

Title:
  memlock setting in systemd (pid 1) too low for containers (bionic)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1830746/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1830746] [NEW] memlock setting in systemd (pid 1) too low for containers (bionic)

2019-05-28 Thread Kees Bos
Public bug reported:

See also https://discuss.linuxcontainers.org/t/limits-kernel-memlock-
cannot-exceed-16777216/4856/5

In containers, the limits.kernel.memlock cannot exceed 16777216 when the
container is bionic. The memlock setting is set to 16M in systemd and
cannot be bumped up in an unprivileged container.

This is fixed in upstream systemd.

Container ubuntu version:
Distributor ID: Ubuntu
Description:Ubuntu 18.04.2 LTS
Release:18.04
Codename:   bionic

systemd package version: 237-3ubuntu10.21

** Affects: systemd (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1830746

Title:
  memlock setting in systemd (pid 1) too low for containers (bionic)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1830746/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1767172] Re: Regression: /etc/modules checked against blacklist or it's really hard to load blacklisted watchdog modules when one really wants one

2019-05-20 Thread Kees Cook
I think it's fine. It sounds like there will just be no way to override
package-installed blacklists any more. That's unfortunate, but it's a
very rare situation.

** Changed in: systemd (Ubuntu)
   Status: Incomplete => Won't Fix

** Changed in: linux (Ubuntu)
   Status: Incomplete => Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1767172

Title:
  Regression: /etc/modules checked against blacklist or it's really hard
  to load blacklisted watchdog modules when one really wants one

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1767172/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 305901]

2019-02-22 Thread Kees Cook
So I'd like to bring this back up and reiterate the issue: there is no
benefit to the early truncation, and it actively breaks lots of existing
software (which is why Debian and Ubuntu have had this fix for 10 years
now).

What is the _benefit_ of early truncation that justifies breaking so
many existing cases?

Can glibc please take this patch? http://paste.ubuntu.com/p/CbrxmSfKD4/

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/305901

Title:
  Intrepid gcc -O2 breaks string appending with sprintf(), due to
  fortify source patch

To manage notifications about this bug go to:
https://bugs.launchpad.net/glibc/+bug/305901/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 305901]

2019-02-22 Thread Kees Cook
It's not defined in POSIX, but it has worked a certain way in glibc for
decades. There's no _reason_ to break it for _FORTIFY_SOURCE. Pre-
truncating just silently breaks programs and does weird stuff. If you
want to expose it with _FORITFY_SOURCE then have vsprintf notice that
the target and first format argument are the same variable, and refuse
to build.

Either pretruncation should be eliminated, or the undefined behavior
should be explicitly detected and dealt with. Just having programs lose
data while running with no indication of the cause seems like a terrible
user experience.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/305901

Title:
  Intrepid gcc -O2 breaks string appending with sprintf(), due to
  fortify source patch

To manage notifications about this bug go to:
https://bugs.launchpad.net/glibc/+bug/305901/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 305901]

2019-02-22 Thread Kees Cook
I'd still like to have this patch applied -- while we can claim the
behavior is "undefined", it is not, in fact, undefined. It behaves one
way without -D_FORTIFY_SOURCE=2, and differently with it. And that
difference doesn't need to exist. Ubuntu carried this patch for quite a
while.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/305901

Title:
  Intrepid gcc -O2 breaks string appending with sprintf(), due to
  fortify source patch

To manage notifications about this bug go to:
https://bugs.launchpad.net/glibc/+bug/305901/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1640208] Re: Confusion between "scantool" and "freediag

2019-01-13 Thread Kees Cook
I have no idea how that connection happened. Seems like something
automatic in Launchpad? I've dropped the linkage on the scantool side
now. Weird!

** Changed in: scantool (Ubuntu)
   Status: New => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1640208

Title:
  Confusion between "scantool" and "freediag

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/scantool/+bug/1640208/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1803929] Re: Summary: Kernel bug (unhandled paging request) on "udisksctl power-off"

2018-12-04 Thread Jan Kees van Amerongen
Unfortunately 4.4.0-140 does not solve this problem.

Going back to 4.4.0-138 solved the problem here as well too

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1803929

Title:
  Summary: Kernel bug (unhandled paging request) on "udisksctl power-
  off"

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1803929/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1771650] Re: openvpn startup script isn't working in ubuntu 18.04

2018-11-27 Thread Kees Cook
It shouldn't be necessary to do explicit "enable" calls to make this
work. The generator _should_ be finding all the .conf files
automatically:

/lib/systemd/system-generators/openvpn-generator

However, it is NOT working for me...

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1771650

Title:
  openvpn startup script isn't working in ubuntu 18.04

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-release-notes/+bug/1771650/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1783651] Re: Please enable CONFIG_PAGE_POISONING

2018-07-25 Thread Kees Cook
Oh no, leave CONFIG_PAGE_POISONING_NO_SANITY=y. Things get REALLY slow
without that, and the default kernel is built with hibernation, so I
would expect to do =y for that option.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1783651

Title:
  Please enable CONFIG_PAGE_POISONING

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1783651/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1783651] Re: Please enable CONFIG_PAGE_POISONING

2018-07-25 Thread Kees Cook
To clarify, I'm suggesting:

CONFIG_PAGE_POISONING=y
CONFIG_PAGE_POISONING_ZERO=y
CONFIG_PAGE_POISONING_NO_SANITY=y

this should have no impact on regular boots, and if someone boots with
"page_poison=1" then they get page wiping when page_alloc pages are
freed (and then GFP_ZERO is a no-op since it was already freed), so it
becomes a reasonable trade-off on performance vs gaining the wipe-on-
free ability of the buddy allocator.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1783651

Title:
  Please enable CONFIG_PAGE_POISONING

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1783651/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1783651] [NEW] Please enable CONFIG_PAGE_POISONING

2018-07-25 Thread Kees Cook
Public bug reported:

I'd like to be able to use page poisoning, but CONFIG_PAGE_POISONING is
not enabled on Ubuntu. (This option itself has a near-zero performance
impact since it must be combined with the boot option "page_poison=1" to
actually enable the poisoning.)

To make the poisoning (when enabled) less of an impact, I'd also like to
see CONFIG_PAGE_POISONING_ZERO=y too, which means GFP_ZEROing can be
skipped.

** Affects: linux (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1783651

Title:
  Please enable CONFIG_PAGE_POISONING

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1783651/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1773859] Re: upgrades to 18.04 fail

2018-06-12 Thread Kees Cook
# dpkg -L systemd-shim
/.
/usr
/usr/lib
/usr/lib/i386-linux-gnu
/usr/lib/i386-linux-gnu/systemd-shim
/usr/lib/i386-linux-gnu/systemd-shim-cgroup-release-agent
/usr/lib/systemd
/usr/lib/systemd/ntp-units.d
/usr/lib/systemd/ntp-units.d/systemd-shim.list
/usr/share
/usr/share/dbus-1
/usr/share/dbus-1/system-services
/usr/share/dbus-1/system-services/org.freedesktop.systemd1.service
package diverts others to: 
/usr/share/dbus-1/system-services/org.freedesktop.systemd1.service.systemd
/usr/share/doc
/usr/share/doc/systemd-shim
/usr/share/doc/systemd-shim/copyright
/usr/share/doc/systemd-shim/changelog.Debian.gz


# cat /var/lib/dpkg/info/systemd-shim.postrm 
#!/bin/sh

set -e

if [ "$1" = remove -o "$1" = purge ]; then
dpkg-divert --package systemd-shim --remove --rename --divert \

/usr/share/dbus-1/system-services/org.freedesktop.systemd1.service.systemd \

/usr/share/dbus-1/system-services/org.freedesktop.systemd1.service
fi

# Automatically added by dh_installdeb
dpkg-maintscript-helper rm_conffile 
/etc/dbus-1/system.d/org.freedesktop.systemd-shim.conf 8-4 systemd-shim -- "$@"
# End automatically added section
# Automatically added by dh_installdeb
dpkg-maintscript-helper rm_conffile 
/etc/dbus-1/system.d/org.freedesktop.systemd1.conf 6-2 systemd-shim -- "$@"
# End automatically added section


The error was:

Removing systemd-shim (9-1bzr4ubuntu1) ...
Removing 'diversion of 
/usr/share/dbus-1/system-services/org.freedesktop.systemd1.service to 
/usr/share/dbus-1/system-services/org.freedesktop.systemd1.service.systemd by 
systemd-shim'
dpkg-divert: error: rename involves overwriting 
'/usr/share/dbus-1/system-services/org.freedesktop.systemd1.service' with
  different file 
'/usr/share/dbus-1/system-services/org.freedesktop.systemd1.service.systemd', 
not allowed


I have no idea what the dpkg-divert error means there, but I assume there's 
some interaction I'm not following with the divert...

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1773859

Title:
  upgrades to 18.04 fail

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1773859/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1773859] Re: upgrades to 18.04 fail

2018-06-12 Thread Kees Cook
# cat /usr/share/dbus-1/system-services/org.freedesktop.systemd1.service
[D-BUS Service]
Name=org.freedesktop.systemd1
User=root
Exec=/usr/lib/x86_64-linux-gnu/systemd-shim

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1773859

Title:
  upgrades to 18.04 fail

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1773859/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1593924] Re: systemd-shim was not installed in 16.10 and now cannot purge or remove

2018-05-28 Thread Kees Cook
** Package changed: libjpeg-turbo (Ubuntu) => systemd-shim (Ubuntu)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1593924

Title:
  systemd-shim was not installed in 16.10 and now cannot purge or remove

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/systemd-shim/+bug/1593924/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1773859] [NEW] upgrades to 18.04 fail

2018-05-28 Thread Kees Cook
Public bug reported:

$ sudo apt upgrade
Reading package lists... Done
Building dependency tree
Reading state information... Done
Calculating upgrade... Done
The following packages will be REMOVED:
  systemd-shim
0 upgraded, 0 newly installed, 1 to remove and 0 not upgraded.
1 not fully installed or removed.
After this operation, 71.7 kB disk space will be freed.
Do you want to continue? [Y/n] y
(Reading database ... 63 files and directories currently installed.)
Removing systemd-shim (9-1bzr4ubuntu1) ...
Removing 'diversion of 
/usr/share/dbus-1/system-services/org.freedesktop.systemd1.service to 
/usr/share/dbus-1/system-services/org.freedesktop.systemd1.service.systemd by 
systemd-shim'
dpkg-divert: error: rename involves overwriting 
'/usr/share/dbus-1/system-services/org.freedesktop.systemd1.service' with
  different file 
'/usr/share/dbus-1/system-services/org.freedesktop.systemd1.service.systemd', 
not allowed
dpkg: error processing package systemd-shim (--remove):
 subprocess installed post-removal script returned error exit status 2
Errors were encountered while processing:
 systemd-shim
E: Sub-process /usr/bin/dpkg returned an error code (1)

Commenting out the dpkg-divert in systemd-shim's postrm solved this for
me and I was about to continue the upgrade.

** Affects: systemd (Ubuntu)
 Importance: Undecided
 Status: New

** Affects: systemd-shim (Ubuntu)
 Importance: Undecided
 Status: New

** Affects: systemd (Ubuntu Bionic)
 Importance: Undecided
 Status: New

** Affects: systemd-shim (Ubuntu Bionic)
 Importance: Undecided
 Status: New

** Also affects: systemd (Ubuntu)
   Importance: Undecided
   Status: New

** Also affects: systemd (Ubuntu Bionic)
   Importance: Undecided
   Status: New

** Also affects: systemd-shim (Ubuntu Bionic)
   Importance: Undecided
   Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1773859

Title:
  upgrades to 18.04 fail

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1773859/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1766052] Re: Incorrect blacklist of bcm2835_wdt

2018-05-09 Thread Kees Cook
ping...

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1766052

Title:
  Incorrect blacklist of bcm2835_wdt

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1766052/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1767172] Re: Regression: /etc/modules checked against blacklist

2018-04-26 Thread Kees Cook
https://github.com/systemd/systemd/pull/8830

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1767172

Title:
  Regression: /etc/modules checked against blacklist

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1767172/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1767172] [NEW] Regression: /etc/modules checked against blacklist

2018-04-26 Thread Kees Cook
Public bug reported:

Before systemd-modules-load, /etc/init.d/kmod would load modules
directly with "modprobe" (and _not_ "modprobe -b"):

load_module() {
  local module args
  module="$1"
  args="$2"

  if [ "$VERBOSE" != no ]; then
log_action_msg "Loading kernel module $module"
modprobe $module $args || true
  else
modprobe $module $args > /dev/null 2>&1 || true
  fi
}

However, under 18.04, systemd-modules-load will _ignore_ modules that
are manually listed in /etc/modules and process them with the blacklist
(the same as "modprobe -b" would). This means that it is not possible to
manually load modules that are blacklisted (like watchdog modules):

systemd-238/src/modules-load/modules-load.c:

static int load_module(struct kmod_ctx *ctx, const char *m) {
const int probe_flags = KMOD_PROBE_APPLY_BLACKLIST;
...
default:
err = kmod_module_probe_insert_module(mod, probe_flags,
  NULL, NULL, NULL, 
NULL);

if (err == 0)
log_info("Inserted module '%s'", 
kmod_module_get_name(mod));
else if (err == KMOD_PROBE_APPLY_BLACKLIST)
log_info("Module '%s' is blacklisted", 
kmod_module_get_name(mod));

Blacklists should _not_ be applied by systemd-modules-load.

** Affects: systemd (Ubuntu)
 Importance: Undecided
 Status: New


** Tags: regression-release

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1767172

Title:
  Regression: /etc/modules checked against blacklist

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1767172/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1766052] Re: Incorrect blacklist of bcm2835_wdt

2018-04-26 Thread Kees Cook
Oops, I missed the "|" ... fixed here:

https://lists.ubuntu.com/archives/kernel-team/2018-April/092002.html

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1766052

Title:
  Incorrect blacklist of bcm2835_wdt

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1766052/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1759369] Re: kernel build fails on arm64

2018-04-24 Thread Kees Cook
** Also affects: gcc-7 (Ubuntu Bionic)
   Importance: Undecided
   Status: Fix Released

** Also affects: gcc-7-cross (Ubuntu Bionic)
   Importance: High
   Status: Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1759369

Title:
  kernel build fails on arm64

To manage notifications about this bug go to:
https://bugs.launchpad.net/gcc-linaro/+bug/1759369/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1766052] Re: Incorrect blacklist of bcm2835_wdt

2018-04-22 Thread Kees Cook
This should fix it:

https://lists.ubuntu.com/archives/kernel-team/2018-April/091890.html

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1766052

Title:
  Incorrect blacklist of bcm2835_wdt

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1766052/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1766052] [NEW] Incorrect blacklist of bcm2835_wdt

2018-04-21 Thread Kees Cook
Public bug reported:

Without bcm2835_wdt loaded, Raspberry Pi systems cannot reboot or shut
down. This needs to be removed from the automatic blacklist generated by
the kernel build that ends up in /lib/modprobe.d/blacklist_linux_$(uname
-r).conf

** Affects: linux (Ubuntu)
 Importance: Undecided
 Status: New

** Affects: linux (Ubuntu Artful)
 Importance: Undecided
 Status: New

** Affects: linux (Ubuntu Bionic)
 Importance: Undecided
 Status: New

** Also affects: linux (Ubuntu Bionic)
   Importance: Undecided
   Status: New

** Also affects: linux (Ubuntu Artful)
   Importance: Undecided
   Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1766052

Title:
  Incorrect blacklist of bcm2835_wdt

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1766052/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1765484] Re: grub-install should handle /boot/efi on RAID1

2018-04-19 Thread Kees Cook
The error, specifically, is:


Installing for x86_64-efi platform.
efibootmgr: option requires an argument -- 'd'
...
grub-install: error: efibootmgr failed to register the boot entry: Operation 
not permitted.
Failed: grub-install --target=x86_64-efi  
WARNING: Bootloader is not properly installed, system may not be bootable

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1765484

Title:
  grub-install should handle /boot/efi on RAID1

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1765484/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1765484] [NEW] grub-install should handle /boot/efi on RAID1

2018-04-19 Thread Kees Cook
Public bug reported:

I am using grub-efi. I have /boot/efi as a RAID1 with metadata=1.0 at
the _end_ of the partition so it can still be seen by UEFI boot firmware
as a FAT32 filesystem. grub-install calls efibootmgr with and empty -d
argument:

efibootmgr -c -d "" ...

since it can't figure out what drive /boot/efi is on. With grub-pc, when
/boot was on a RAID1, grub-install would get run via the grub-pc
postinst for each component of the raid (and/or as a list presented to
the user via debconf).

For example, with this:

# cat /proc/mdstat
Personalities : [raid1] [linear] [multipath] [raid0] [raid6] [raid5] [raid4] 
[raid10] 
md0 : active raid1 sda1[2] sdb1[0]
  524224 blocks super 1.0 [2/2] [UU]

if /dev/md0 was mounted on /boot, grub-pc's postinst would run grub-
install on /dev/sda and /dev/sdb.

In the UEFI case, if /dev/md0 is mounted on /boot/efi, I would expect
efibootmgr to be run multiple times for each component:

efibootmgr -c -d /dev/sda1 -L ubuntu-sda1 ...
efibootmgr -c -d /dev/sdb1 -L ubuntu-sdb1 ...

Dunno about boot ordering, etc. I'm not actually using efibootmgr
currently. As a work-around, I ran "dpkg-reconfigure -p low grub-efi"
and disabled the NVRAM setting in debconf (to avoid efibootmgr failing
grub-install and causing package installs/upgrades to fail).

** Affects: grub2 (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1765484

Title:
  grub-install should handle /boot/efi on RAID1

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1765484/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1750465] Re: package plymouth-theme-ubuntu-text 0.9.2-3ubuntu17 failed to install/upgrade: dependency problems - leaving triggers unprocessed

2018-03-04 Thread Kees Cook
I hit this too (on arm64).

** Attachment added: "apt-term.log"
   
https://bugs.launchpad.net/ubuntu/+source/plymouth/+bug/1750465/+attachment/5069501/+files/apt-term.log

** Changed in: plymouth (Ubuntu)
   Status: Incomplete => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1750465

Title:
  package plymouth-theme-ubuntu-text 0.9.2-3ubuntu17 failed to
  install/upgrade: dependency problems - leaving triggers unprocessed

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/plymouth/+bug/1750465/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1751266] [NEW] Missing firmware in linux-image-4.15.0-10-generic

2018-02-23 Thread Kees Hoekzema
Public bug reported:

linux-image-4.15.0-10-generic doesn't have the firmware that linux-
image-4.13.0-32-generic has. It doesn't have any of the files that are
present in 4.13 in /lib/firmware/4.13.0-32-generic/.

For me, this means i can boot 4.15, but my network wont work because of:

kernel: [   13.468996] bnx2 :0b:00.0: Direct firmware load for 
bnx2/bnx2-mips-09-6.2.1b.fw failed with error -2
kernel: [   13.468998] bnx2: Can't load firmware file 
"bnx2/bnx2-mips-09-6.2.1b.fw"

ProblemType: Bug
DistroRelease: Ubuntu 18.04
Package: linux-image-4.15.0-10-generic 4.15.0-10.11
ProcVersionSignature: Ubuntu 4.13.0-32.35-generic 4.13.13
Uname: Linux 4.13.0-32-generic x86_64
AlsaDevices:
 total 0
 crw-rw 1 root audio 116,  1 feb 23 13:12 seq
 crw-rw 1 root audio 116, 33 feb 23 13:12 timer
AplayDevices: Error: [Errno 2] No such file or directory: 'aplay': 'aplay'
ApportVersion: 2.20.8-0ubuntu10
Architecture: amd64
ArecordDevices: Error: [Errno 2] No such file or directory: 'arecord': 'arecord'
AudioDevicesInUse: Error: command ['fuser', '-v', '/dev/snd/seq', 
'/dev/snd/timer'] failed with exit code 1:
Date: Fri Feb 23 13:50:38 2018
InstallationDate: Installed on 2018-02-14 (9 days ago)
InstallationMedia: Ubuntu-Server 18.04 LTS "Bionic Beaver" - Alpha amd64 
(20180212)
IwConfig: Error: [Errno 2] No such file or directory: 'iwconfig': 'iwconfig'
MachineType: IBM System x3550 M3 -[7944S77]-
PciMultimedia:
 
ProcFB: 0 mgadrmfb
ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-4.13.0-32-generic.efi.signed 
root=UUID=4a958e16-f948-4619-bad5-51d238213cc5 ro
RelatedPackageVersions:
 linux-restricted-modules-4.13.0-32-generic N/A
 linux-backports-modules-4.13.0-32-generic  N/A
 linux-firmware 1.171
RfKill: Error: [Errno 2] No such file or directory: 'rfkill': 'rfkill'
SourcePackage: linux
UpgradeStatus: No upgrade log present (probably fresh install)
dmi.bios.date: 11/26/2012
dmi.bios.vendor: IBM Corp.
dmi.bios.version: -[D6E158AUS-1.16]-
dmi.board.asset.tag: (none)
dmi.board.name: 00D4062
dmi.board.vendor: IBM
dmi.board.version: (none)
dmi.chassis.asset.tag: none
dmi.chassis.type: 23
dmi.chassis.vendor: IBM
dmi.chassis.version: none
dmi.modalias: 
dmi:bvnIBMCorp.:bvr-[D6E158AUS-1.16]-:bd11/26/2012:svnIBM:pnSystemx3550M3-[7944S77]-:pvr00:rvnIBM:rn00D4062:rvr(none):cvnIBM:ct23:cvrnone:
dmi.product.family: System x
dmi.product.name: System x3550 M3 -[7944S77]-
dmi.product.version: 00
dmi.sys.vendor: IBM

** Affects: linux (Ubuntu)
 Importance: Undecided
 Status: Confirmed


** Tags: amd64 apport-bug bionic

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1751266

Title:
  Missing firmware in linux-image-4.15.0-10-generic

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1751266/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1747711] Re: file mis-identifies modern executables as application/x-sharedlib

2018-02-17 Thread Kees Cook
This is (sort of) a bug in file. The problem is not being able to
distinguish between shared objects and PIE binaries. (The latter have
INTERP ELF sections and can be run directly.)

$ readelf -l /bin/true
...
Elf file type is EXEC (Executable file)
...
  INTERP 0x0238 0x00400238 0x00400238
 0x001c 0x001c  R  1
  [Requesting program interpreter: /lib64/ld-linux-x86-64.so.2]
...


$ readelf -l /usr/lib/x86_64-linux-gnu/libmagic.so.1.0.0
...
Elf file type is DYN (Shared object file)
...[no INTERP]...


$ readelf -l /usr/bin/ssh
...
Elf file type is DYN (Shared object file)
...
  INTERP 0x0238 0x0238 0x0238
 0x001c 0x001c  R  1
  [Requesting program interpreter: /lib64/ld-linux-x86-64.so.2]

So for mime types to distinguish, "file" needs to grow reporting of the
INTERP presence.

This has become an issue in bionic due to PIE-by-default.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1747711

Title:
  file mis-identifies modern executables as application/x-sharedlib

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/file/+bug/1747711/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1726656] Re: package mysql-server-5.7 5.7.20-0ubuntu0.16.04.1 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1

2017-10-24 Thread Kees Hoekzema
I had the same problem. It turns out it was mysql_upgrade exiting with
an 'Error occurred: The mysql.session exists but is not correctly
configured. The mysql.session needs SELECT privileges in the
performance_schema database and the mysql.db table and also SUPER
privileges.'

The way mysql_upgrade tries to check this requirement is with the query
'SELECT SUM(count)=3 FROM ( SELECT COUNT(*) as count FROM
mysql.tables_priv WHERE Table_priv='Select' and User='mysql.session' and
Db='mysql' and Table_name='user' UNION ALL SELECT COUNT(*) as count FROM
mysql.db WHERE Select_priv='Y' and User='mysql.session' and
Db='performance_schema' UNION ALL SELECT COUNT(*) as count FROM
mysql.user WHERE Super_priv='Y' and User='mysql.session') as user_priv'
which is quite a stupid way to do that.

And this failed in my case because i have 2 mysql.session users, one on
localhost and one with '%' as host, so even tho my users were set up
_exactly_ as mysql_upgrade demanded, it didn't warn me about the
multiple users. Great check... Deleting one caused mysql_upgrade to pass
and the dpkg system to return to normal (with an apt-get install -f)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1726656

Title:
  package mysql-server-5.7 5.7.20-0ubuntu0.16.04.1 failed to
  install/upgrade: subprocess installed post-installation script
  returned error exit status 1

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1726656/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1725681] [NEW] package amavisd-milter 1.5.0-5 failed to install/upgrade: vereistenproblemen - blijft ongeconfigureerd

2017-10-21 Thread Kees van Iwaarden
Public bug reported:

Repeating message.

ProblemType: Package
DistroRelease: Ubuntu 16.04
Package: amavisd-milter 1.5.0-5
ProcVersionSignature: Ubuntu 4.4.0-97.120-generic 4.4.87
Uname: Linux 4.4.0-97-generic x86_64
ApportVersion: 2.20.1-0ubuntu2.10
Architecture: amd64
Date: Wed Oct 18 06:52:04 2017
ErrorMessage: vereistenproblemen - blijft ongeconfigureerd
InstallationDate: Installed on 2016-12-21 (303 days ago)
InstallationMedia: Ubuntu 16.04.1 LTS "Xenial Xerus" - Release amd64 (20160719)
RelatedPackageVersions:
 dpkg 1.18.4ubuntu1.2
 apt  1.2.24
SourcePackage: amavisd-milter
Title: package amavisd-milter 1.5.0-5 failed to install/upgrade: 
vereistenproblemen - blijft ongeconfigureerd
UpgradeStatus: No upgrade log present (probably fresh install)
modified.conffile..etc.default.amavisd-milter: [deleted]
modified.conffile..etc.init.d.amavisd-milter: [deleted]

** Affects: amavisd-milter (Ubuntu)
 Importance: Undecided
 Status: New


** Tags: amd64 apport-package xenial

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1725681

Title:
  package amavisd-milter 1.5.0-5 failed to install/upgrade:
  vereistenproblemen - blijft ongeconfigureerd

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/amavisd-milter/+bug/1725681/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1659801] Re: apparmor rules block ejabberdctl

2017-04-22 Thread Kees Cook
** Bug watch added: Debian Bug tracker #860951
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=860951

** Also affects: ejabberd (Debian) via
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=860951
   Importance: Unknown
   Status: Unknown

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1659801

Title:
  apparmor rules block ejabberdctl

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ejabberd/+bug/1659801/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1659801] Re: apparmor rules block ejabberdctl

2017-04-22 Thread Kees Cook
Add "m" to /etc/apparmor.d/usr.sbin.ejabberdctl's "su" subprofile on
/bin/su line:

/bin/su rm,

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1659801

Title:
  apparmor rules block ejabberdctl

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ejabberd/+bug/1659801/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1580323] Re: Pull/merge 2016.05~rc3+dfsg1-1 from Debian experimental

2017-04-17 Thread Kees Cook
Bump. Please get this merged from Debian unstable. I'd like an arm64
rpi3 :)

** Also affects: u-boot (Ubuntu Zesty)
   Importance: Undecided
   Status: Confirmed

** Also affects: u-boot (Ubuntu Aa-series)
   Importance: Undecided
   Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1580323

Title:
  Pull/merge 2016.05~rc3+dfsg1-1 from Debian experimental

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/u-boot/+bug/1580323/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1680315] [NEW] Disable CONFIG_SECURITY_SELINUX_DISABLE

2017-04-05 Thread Kees Cook
Public bug reported:

In the v4.12 kernel, CONFIG_SECURITY_SELINUX_DISABLE (which allows
disabling selinux after boot) will conflict with read-only LSM
structures. Since Ubuntu is primarily using AppArmor for its LSM, and
SELinux is disabled by default, it makes sense to drop this feature in
favor of the protections offered by __ro_after_init markings on the LSM
structures.

https://patchwork.kernel.org/patch/9571911/

** Affects: linux (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1680315

Title:
  Disable CONFIG_SECURITY_SELINUX_DISABLE

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1680315/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1658255] Re: Kernel not enforcing module signatures under SecureBoot

2017-01-27 Thread Kees Cook
... why aren't all the kernels just signed? Why does this need to be a
separate package at all?

I can confirm installing the -signed package fixes it for me. Where in
the kernel source does this signature effect the output of
/proc/sys/kernel/secure_boot, though? I can't find that...

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1658255

Title:
  Kernel not enforcing module signatures under SecureBoot

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1658255/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1658255] Re: Kernel not enforcing module signatures under SecureBoot

2017-01-26 Thread Kees Cook
the proc handler does:
secure_boot_enabled = efi_enabled(EFI_SECURE_BOOT);
this feature flag is set at boot:
#ifdef CONFIG_EFI_SECURE_BOOT_SIG_ENFORCE
if (boot_params.secure_boot == EFI_SECURE_BOOT) {
set_bit(EFI_SECURE_BOOT, );
enforce_signed_modules();
pr_info("Secure boot enabled\n");
}

And since I don't see the pr_info, nor the flag, nor the module
enforcement, the boot_params is probably missing?

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1658255

Title:
  Kernel not enforcing module signatures under SecureBoot

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1658255/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1658255] Re: Kernel not enforcing module signatures under SecureBoot

2017-01-26 Thread Kees Cook
And that must be doing something wrong, since:

sudo efivar -p -n $(efivar --list | grep SecureBoot)

shows "1"

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1658255

Title:
  Kernel not enforcing module signatures under SecureBoot

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1658255/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1658255] Re: Kernel not enforcing module signatures under SecureBoot

2017-01-26 Thread Kees Cook
And it looks like this is specific to the 4.8 kernel. 4.4 thinks secure
boot is enabled.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1658255

Title:
  Kernel not enforcing module signatures under SecureBoot

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1658255/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1658255] Re: Kernel not enforcing module signatures under SecureBoot

2017-01-26 Thread Kees Cook
Oh, and that's not set up by the bootloader, it's in
arch/x86/boot/compressed/eboot.c:

boot_params->secure_boot = get_secure_boot();

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1658255

Title:
  Kernel not enforcing module signatures under SecureBoot

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1658255/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1658255] Re: Kernel not enforcing module signatures under SecureBoot

2017-01-26 Thread Kees Cook
(Hm, dmesg WARN on IOMMU seems to think I need
910170442944e1f8674fd5ddbeeb8ccd1877ea98, but that's unrelated...)


** Attachment added: "dmesg.txt"
   
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1658255/+attachment/4809482/+files/dmesg.txt

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1658255

Title:
  Kernel not enforcing module signatures under SecureBoot

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1658255/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1658233] Re: missing apparmor rules

2017-01-26 Thread Kees Cook
I added this to the base profile, since other processes tripped over
that one. (It's in a separate bug report)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1658233

Title:
  missing apparmor rules

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1658233/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1658255] Re: Kernel not enforcing module signatures under SecureBoot

2017-01-24 Thread Kees Cook
$ cat /proc/sys/kernel/secure_boot
0

That seems weird. Everything else thinks it's enabled. What sets this
one (and what does it represent)?

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1658255

Title:
  Kernel not enforcing module signatures under SecureBoot

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1658255/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1639180] Re: no login possible after update to nvidia 304.132

2017-01-22 Thread Kees Cook
Is this fixed in Xenial?

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1639180

Title:
  no login possible after update to nvidia 304.132

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304/+bug/1639180/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1658255] [NEW] Kernel not enforcing module signatures under SecureBoot

2017-01-20 Thread Kees Cook
Public bug reported:

$ sudo mokutil --sbstate
SecureBoot enabled
$ cat /proc/sys/kernel/moksbstate_disabled
0
$ sudo insmod ./hello.ko
$ echo $?
0
$ dmesg | grep Hello
[00112.530866] Hello, world!
$ strings /lib/modules/$(uname -r)/kernel/lib/test_module.ko | grep signature
~Module signature appended~
$ strings hello.ko | grep signature
$ uname -r
4.8.0-34-generic

** Affects: linux (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1658255

Title:
  Kernel not enforcing module signatures under SecureBoot

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1658255/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1658236] Re: php abstraction not updated for php7

2017-01-20 Thread Kees Cook
This creates an upgrade burden on anyone already including the php5
abstraction. I think there should be a single abstraction (named php)
but a symlink back to php5 that includes 5 and current...

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1658236

Title:
  php abstraction not updated for php7

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1658236/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1658239] [NEW] base abstraction missing glibc /proc/$pid/ things

2017-01-20 Thread Kees Cook
Public bug reported:

There are yet more glibc-needed files missing from the base abstraction:

--- base2017-01-20 15:37:50.0 -0800
+++ /etc/apparmor.d/abstractions/base   2016-12-06 14:13:58.0 -0800
@@ -92,7 +92,7 @@
   /sys/devices/system/cpu/online r,

   # glibc's *printf protections read the maps file
-  @{PROC}/@{pid}/mapsr,
+  @{PROC}/@{pid}/{maps,auxv,status}r,

   # libgcrypt reads some flags from /proc
   @{PROC}/sys/crypto/*   r,

** Affects: apparmor (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1658239

Title:
  base abstraction missing glibc /proc/$pid/ things

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1658239/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1658238] [NEW] apache2 abstraction incomplete

2017-01-20 Thread Kees Cook
Public bug reported:

Apache2 needs updates for proper signal handling, optional saslauth, and
OCSP stapling...


--- apache2-common  2014-06-24 11:06:06.0 -0700
+++ /etc/apparmor.d/abstractions/apache2-common 2015-05-21 07:51:49.0 
-0700
@@ -8,6 +8,8 @@
   signal (receive) peer=unconfined,
   # Allow apache to send us signals by default
   signal (receive) peer=/usr/sbin/apache2,
+  # Allow other hats to signal by default
+  signal peer=/usr/sbin/apache2//*,
   # Allow us to signal ourselves
   signal peer=@{profile_name},

@@ -25,3 +27,12 @@

   /dev/urandomr,

+  # sasl-auth
+  /run/saslauthd/mux rw,
+
+  # OCSP stapling
+  /var/log/apache2/stapling-cache rw,

** Affects: apparmor (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1658238

Title:
  apache2 abstraction incomplete

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1658238/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


  1   2   3   4   5   6   7   8   9   10   >