[Bug 416093] Re: karmic hangs during booting

2009-08-25 Thread aloctavodia
I realize that the system can boot normally if samba is completely
removed from the system

** Package changed: ubuntu = samba (Ubuntu)

** Description changed:

  after upgrading from Jaunty to Karmic alpha4 the boot process hangs. I
- am able to see the usplash, the bar progress until is almost finished
- and  then the system switch to a terminal-like screen (that give details
- of the booting process). The two last sentences are (and the system
- hangs)
+ am able to see usplash. the bar progress until is almost finished and
+ then the system switch to a terminal-like screen (that give details of
+ the booting process). The two last sentences are (and the system hangs)
  
  Running DKMS autoinstallation  service for kernel 2.6.31.6-generic  [OK]
- Starting Samba demon. (something similar)
+ Starting Samba demon. (or something similar)
  
- At fist I believe the problem was samba so I uninstall it (using ALT-F2
- i was able get access to a terminal), I reboot and get this message (and
- the system hangs)
+ Removing samba fix the problem.
  
- Running DKMS autoinstallation  service for kernel 2.6.31.6-generic  [OK]
- Starting Winbid  demon. (something similar)
+ A workaround (without removing samba) is to boot in recovery mode, then
+ choose netroot. exit netroot and select resume normal mode.
  
  
- A workaround is boot in recovery mode, then choose netroot. exit netroot and 
select resume normal mode.
- 
- Note: when the systems hangs I wait only for couple of minutes and then
- reboot. (the keyboard is fully responsive may be if i wait a couple of
- minutes more the system could continue to boot, I will let you know)
- 
- Obviously i don´t get any idea about the soruce of this problem or why
- the workaround works...
+ Obviously i don´t get any idea about the source of this problem or why the 
workaround works...
  
  I have a vostro 1400, Intel 965 GMA and I´m running the amd64 version.

** Tags added: boot karmic samba

-- 
karmic hangs during booting
https://bugs.launchpad.net/bugs/416093
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 369737] Re: preg_replace_callback segfaults

2009-08-25 Thread Andreas Olsson
@fiasco:

Also running Ubuntu 9.04?

Since you have the code in front of you, do you have the possibility to
create a standalone test case?

-- 
preg_replace_callback segfaults
https://bugs.launchpad.net/bugs/369737
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to php5 in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 407428] Re: sshd zombie processes and strange behavior after karmic upgrade

2009-08-25 Thread Wisefox
Don't know the developer already get the root cause or not. I can
provide some clue deeper into this issue.

When Karmic starts the ssh and other several services(udevd,dhcp etc.), it uses 
a wrong Sigmask set for the program:
Check the Sigblk for sshd:
$ cat /proc/`pidof sshd| awk '{print $1}'`/status | grep Sig
SigQ:   4/16297
SigPnd: 
SigBlk: fffe7ffb9eff  # should be all zero
SigIgn: 
SigCgt: 000180006000

All child forked by sshd will succeed the same SigBlk from sshd. And the Ctrl + 
C token uses the SIGINT(2) to interrupt the program. But it's blocked by the 
program. That's the cause of sshd zombie and Ctrl + C problem.
I provide two method to get sshd back to normal.
1). On that machine(physical), use the /etc/init.d/ssh stop/start to restart 
ssh to make it use the right mask.
2). Write a little wrapper program to restart the ssh.

-- 
sshd zombie processes and strange behavior after karmic upgrade
https://bugs.launchpad.net/bugs/407428
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 343738] Re: vsftpd max username length too small

2009-08-25 Thread Kenny Millington
** Description changed:

  vsftpd has a max username length of 32, this is too small for a virtual
  hosting environment where the username is a user's e-mail address (if
  they have a long domain name etc...)
  
  This issue was patched in FC10 via their patch system and has been
  pulled into the new upstream 2.1 version, I'll attach a debdiff to this
  bug once it's created so I know the bug number.
+ 
+ SRU Report (for Hardy)
+ -
+ 
+ This bug's impact is (probably) mostly felt by users running Hardy as a
+ hosting server using vsftpd as their FTP server. Hosting servers
+ typically use either the domain name and/or e-mail address as the
+ username which can easily exceed the 32 character limit.
+ 
+ This has been fixed in the current development version (Karmic -
+ 2.1.1~pre1-2ubuntu1) by syncing a later release of vsftpd from Debian
+ which has already applied this fix. A minimal patch to apply this fix
+ has previously been attached to this bug (LP343738-hardy.patch).
+ 
+ TEST CASE: This bug can be reproduced by creating a username greater
+ than 32 characters then attempting to login with the unpatched vsftpd.
+ Upon upgrading to the patched vsftpd this login attempt should then
+ succeed.
+ 
+ Looking at the patch regression seems unlikely (given the nature of the
+ change), however, the worst case outcomes I can see for regression are:-
+ 
+ a) vsftpd stops working; or
+ b) An (unknown) underlying authentication mechanism requires vsftpd to reject 
usernames greater than 32 characters and hence breaks.
+ 
+ I'm afraid I'm not sure how likely (b) is, however PAM can handle
+ usernames of such length.

-- 
vsftpd max username length too small
https://bugs.launchpad.net/bugs/343738
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to vsftpd in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 397721] Re: [needs-packaging] php-fpm

2009-08-25 Thread dreamcat4
Good news: The issue for loading zend extensions is now fixed.
Bad news: Theres some other problem the child workers keep dying.

Details on jottit: 
http://dreamcat4.jottit.com/new_php5-fpm_testing_candidate

-- 
[needs-packaging] php-fpm
https://bugs.launchpad.net/bugs/397721
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to php5 in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 343738] Re: vsftpd max username length too small

2009-08-25 Thread Kenny Millington
Just spotted a slight error in my debdiff. I made my debdiff against
2.0.6-1ubuntu1, failing to notice the -ubuntu1.1 in hardy-updates.

I'll submit an updated patch/debdiff later today against -ubuntu1.1 if
someone else doesn't do so before hand.

TESTING NOTE: Please note that although the version in my PPA is fine to
test with - it will regress #254905 (FTPS doesn't work with clients such
as FileZilla).

-- 
vsftpd max username length too small
https://bugs.launchpad.net/bugs/343738
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to vsftpd in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 349919] Re: ssh client sometimes hangs

2009-08-25 Thread ZelinskiyIS
On jaunty 9.04, i386 I experience the same bug. Sometimes, when logging
out the remote shell, ssh freezes locally after saying logout.  In
such cases I have to use Ctrl-C. The bug seem happen more often when
tunneling graphics, than when not using this ability. The bug is not
critical, however, because Ctrl-C has allways helped.

-- 
ssh client sometimes hangs
https://bugs.launchpad.net/bugs/349919
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 409987] Re: apache2 segfault using mod_deflate

2009-08-25 Thread tiiibs
Hi,

I've the same problem. I've patched the server but the error is still
here!

[Tue Aug 25 11:25:02 2009] [notice] child pid 10025 exit signal Segmentation 
fault (11)
[Tue Aug 25 11:25:02 2009] [notice] child pid 10026 exit signal Segmentation 
fault (11)
[Tue Aug 25 11:25:02 2009] [notice] child pid 10027 exit signal Segmentation 
fault (11)

what are tests that I can do?

-- 
apache2 segfault using mod_deflate
https://bugs.launchpad.net/bugs/409987
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to apache2 in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 409987] Re: apache2 segfault using mod_deflate

2009-08-25 Thread Marc Deslauriers
tiiibs: are you sure it's the same problem? What apache2 package version
are you running? What release of Ubuntu?

-- 
apache2 segfault using mod_deflate
https://bugs.launchpad.net/bugs/409987
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to apache2 in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 418342] [NEW] akonadi-server prevents install of mysql-server-5.0

2009-08-25 Thread Launchpad Bug Tracker
You have been subscribed to a public bug:

Binary package hint: akonadi-server

I'm running a fully up to date karmic 9.10 alpha system.

akonadi-server is depending on mysql-server-core-5.1, which conflicts
with mysql-server-core-5.0.

This is preventing me from installing mysql-server-5.0 on my system,
which I need for development work.

This seems to be related to bug #414224, but is oddly the exact
opposite.

** Affects: mysql-dfsg-5.1 (Ubuntu)
 Importance: Undecided
 Status: New

-- 
akonadi-server prevents install of mysql-server-5.0
https://bugs.launchpad.net/bugs/418342
You received this bug notification because you are a member of Ubuntu Server 
Team, which is subscribed to mysql-dfsg-5.1 in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 418342] Re: akonadi-server prevents install of mysql-server-5.0

2009-08-25 Thread Jonathan Thomas
** Package changed: akonadi (Ubuntu) = mysql-dfsg-5.1 (Ubuntu)

-- 
akonadi-server prevents install of mysql-server-5.0
https://bugs.launchpad.net/bugs/418342
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to mysql-dfsg-5.1 in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 32067] Re: public Samba SMB shares cannot be accessed anonymously from Windows XP, a password prompt appears

2009-08-25 Thread Thierry Carrez
** Also affects: samba (Ubuntu Hardy)
   Importance: Undecided
   Status: New

** Changed in: samba (Ubuntu Hardy)
   Status: New = Fix Released

-- 
public Samba SMB shares cannot be accessed anonymously from Windows XP, a 
password prompt appears
https://bugs.launchpad.net/bugs/32067
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 152624] Re: Buffer overflow in check_http.c (CVE-2007-5198)

2009-08-25 Thread Thierry Carrez
** Also affects: nagios-plugins (Ubuntu Dapper)
   Importance: Undecided
   Status: New

** Changed in: nagios-plugins (Ubuntu Dapper)
   Status: New = Fix Released

-- 
Buffer overflow in check_http.c (CVE-2007-5198)
https://bugs.launchpad.net/bugs/152624
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to nagios-plugins in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 406276] Re: initial munin-node setup misses correct start/stop

2009-08-25 Thread Thierry Carrez
** Changed in: munin (Ubuntu)
   Status: Triaged = In Progress

** Changed in: munin (Ubuntu)
 Assignee: (unassigned) = Thierry Carrez (ttx)

-- 
initial munin-node setup misses correct start/stop
https://bugs.launchpad.net/bugs/406276
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to munin in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 414232] Re: munin-node tries to autoconf /usr/share/munin/plugins/postgres_space_

2009-08-25 Thread Thierry Carrez
** Changed in: munin (Ubuntu)
   Importance: Undecided = Medium

** Changed in: munin (Ubuntu)
   Status: Confirmed = In Progress

** Changed in: munin (Ubuntu)
 Assignee: (unassigned) = Thierry Carrez (ttx)

-- 
munin-node tries to autoconf /usr/share/munin/plugins/postgres_space_
https://bugs.launchpad.net/bugs/414232
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to munin in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 414232] Re: munin-node tries to autoconf /usr/share/munin/plugins/postgres_space_

2009-08-25 Thread Launchpad Bug Tracker
This bug was fixed in the package munin - 1.2.6-13ubuntu2

---
munin (1.2.6-13ubuntu2) karmic; urgency=low

  * Don't autoconf the plugin postgres_space_ (LP: #414232)
  * Restart munin-node after plugin initiation (LP: #406276)

 -- Andreas Olsson an...@ubuntu.com   Thu, 20 Aug 2009 11:56:42 +0200

** Changed in: munin (Ubuntu)
   Status: In Progress = Fix Released

-- 
munin-node tries to autoconf /usr/share/munin/plugins/postgres_space_
https://bugs.launchpad.net/bugs/414232
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to munin in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 406276] Re: initial munin-node setup misses correct start/stop

2009-08-25 Thread Launchpad Bug Tracker
This bug was fixed in the package munin - 1.2.6-13ubuntu2

---
munin (1.2.6-13ubuntu2) karmic; urgency=low

  * Don't autoconf the plugin postgres_space_ (LP: #414232)
  * Restart munin-node after plugin initiation (LP: #406276)

 -- Andreas Olsson an...@ubuntu.com   Thu, 20 Aug 2009 11:56:42 +0200

** Changed in: munin (Ubuntu)
   Status: In Progress = Fix Released

-- 
initial munin-node setup misses correct start/stop
https://bugs.launchpad.net/bugs/406276
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to munin in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


Re: [Bug 418342] [NEW] akonadi-server prevents install of mysql-server-5.0

2009-08-25 Thread Mathias Gug
On Tue, Aug 25, 2009 at 12:46:07PM -, Launchpad Bug Tracker wrote:
 akonadi-server is depending on mysql-server-core-5.1, which conflicts
 with mysql-server-core-5.0.
 

Both mysql-server-core-5.{01} should provide mysql-server-core and
akonadi should depend on mysql-server-core | mysql-server-core-5.1.

  status triaged
  importance low

-- 
Mathias Gug
Ubuntu Developer  http://www.ubuntu.com


** Changed in: mysql-dfsg-5.1 (Ubuntu)
   Importance: Undecided = Low

** Changed in: mysql-dfsg-5.1 (Ubuntu)
   Status: New = Triaged

-- 
akonadi-server prevents install of mysql-server-5.0
https://bugs.launchpad.net/bugs/418342
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to mysql-dfsg-5.1 in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 394385] Re: [needs-packaging] php packages need update to 5.3

2009-08-25 Thread Ondřej Surý
People it would be great, if you could contact debian php maintainers
before doing double work in Ubuntu.

There are more known problems in php5.3 from experimental which needed
to be fixed and are causing segfaults (timezone, gd).

We are currently thinking about pushing php 5.3 packages to unstable, so
we have some time before next debian release to iron out all bugs.

There is a public git repository and since we lack of manpower these
days (mainly because me and sean are burnt out), we would gladly welcome
new blood (as well formated patchsets are welcomed too).

-- 
[needs-packaging] php packages need update to 5.3
https://bugs.launchpad.net/bugs/394385
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to php5 in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 164007] Re: [net-snmp] remote Denial of Service vulnerability

2009-08-25 Thread Jamie Strandboge
http://www.ubuntu.com/usn/usn-564-1

** Also affects: net-snmp (Ubuntu Dapper)
   Importance: Undecided
   Status: New

** Also affects: net-snmp (Ubuntu Edgy)
   Importance: Undecided
   Status: New

** Also affects: net-snmp (Ubuntu Feisty)
   Importance: Undecided
   Status: New

** Also affects: net-snmp (Ubuntu Gutsy)
   Importance: Undecided
   Status: New

** Changed in: net-snmp (Ubuntu Dapper)
   Status: New = Fix Released

** Changed in: net-snmp (Ubuntu Edgy)
   Status: New = Fix Released

** Changed in: net-snmp (Ubuntu Feisty)
   Status: New = Fix Released

** Changed in: net-snmp (Ubuntu Gutsy)
   Status: New = Fix Released

-- 
[net-snmp] remote Denial of Service vulnerability
https://bugs.launchpad.net/bugs/164007
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to net-snmp in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 194487] Re: network-manager[-openvpn] doesn't handle properly routes pushed by OpenVPN 2.1_Rc7

2009-08-25 Thread Diego Rivera
Ok I've located the culprit logic.  It's in NetworkManagerSystem.c - the
logic first removes all routes attached to the new VPN interface, and
then proceeds to force-feed what it believes to be the correct routing
configurations.  I think what's appropriate here is the addition of a
flag in the DBUS messages which indicates the behavior to be followed.
If the flag is missing, the default (i.e. current) behavior is followed
- otherwise we can respect routing as implemented by the VPN backend
(desired), or some combination of the two.

I'll get cracking on this and see if I can come up with a small, simple
patch for the problem.

Please note: for now, I'm working only on 8.04 (NM 0.6.6).  After that,
I'll have a look at newer versions and see if the patch would need work.

Cheers.

-- 
network-manager[-openvpn] doesn't handle properly routes pushed by OpenVPN 
2.1_Rc7
https://bugs.launchpad.net/bugs/194487
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openvpn in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 194487] Re: network-manager[-openvpn] doesn't handle properly routes pushed by OpenVPN 2.1_Rc7

2009-08-25 Thread Diego Rivera
Ok I've located the culprit logic.  It's in NetworkManagerSystem.c - the
logic first removes all routes attached to the new VPN interface, and
then proceeds to force-feed what it believes to be the correct routing
configurations.  I think what's appropriate here is the addition of a
flag in the DBUS messages which indicates the behavior to be followed.
If the flag is missing, the default (i.e. current) behavior is followed
- otherwise we can respect routing as implemented by the VPN backend
(desired), or some combination of the two.

I'll get cracking on this and see if I can come up with a small, simple
patch for the problem.

Please note: for now, I'm working only on 8.04 (NM 0.6.6).  After that,
I'll have a look at newer versions and see if the patch would need work.

Cheers.

-- 
network-manager[-openvpn] doesn't handle properly routes pushed by OpenVPN 
2.1_Rc7
https://bugs.launchpad.net/bugs/194487
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openvpn in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Blueprint server-karmic-encrypted-swap-as-an-option] Encrypted Swap as an Option

2009-08-25 Thread Dustin Kirkland
Blueprint changed by Dustin Kirkland:

Definition Status: Approved = Superseded

Whiteboard changed:
+ = Status =
+  * Marking this blueprint superseded, as we have implemented this in a 
different way, encrypting swap only when necessary (encrypted-home).
+ -- Dustin Kirkland
+ 
  Discussion Points:
   * UDS Buy-in (main use case is hibernate):
* karmic implementation:
  * encrypted home in installer - setup swap encryption 
(ecryptfs-setup-swap), document hibernation incompatibility
  * randomly generate key on boot (no passphrase wrapping)
  * open wishlist bug for hibernation resume support
  * need UI changes to Applications Accessories Passwords and Encryption 
Keys
* post-karmic implementation (hard):
  * algorithm: wrap randomly generated password with PAM system passphrase 
on login (for multiple users), store in LUKS keyslot
  * teach resume scripts to prompt for user's wrapping passphrase on 
resume, decrypt swap, resume
* possible regressions and workarounds:
  * /tmp contents are still viewable, worked around in short term by using 
tmpfs for /tmp when system has some amount X of RAM, worked around in long term 
by moving /tmp into ~/.tmp
   * additional notes:
* see who is using encrypted home and encrypted swap
  
  
   * Original suggested design:
* encrypt swap, using a randomly generated key every boot
* by default, use a static wrapping password like ubuntu, and store the 
wrapped swap key in LUKS
* teach hibernation resume (init?) to try this static default passphrase 
first
* if that doesn't work, then prompt the user for the wrapping passphrase
* in System-Administration, provide a utility that allows the 
administrator switch from the insecure default ubuntu wrapping passphrase to 
a PAM-based wrapping passphrase
 * teach PAM to take a successful login passphrase and re-wrap the randomly 
generated swap passphrase with the login passphrase if secure swap is 
enabled, (possibly populating 1 or more of the LUKS keyslots)
 * On hibernate event, ensure that the current user's passphrase has been 
used to wrap the swap passphrase in one of the LUKS keyslots
  * would need to prompt for a passphrase here, if this was an auto-login 
and the user wants secure-swap
  -- Dustin Kirkland
  
  
  (steve.langasek) When I migrated my laptop from hardy to intrepid, I
  turned on encrypted swap at the same time (swap LV on top of
  LVM+encryption).  Anything that makes heavy use of swap on my desktop
  now brings the whole system to its knees.  Please be cognizant of
  performance issues when implementing this - I fear this may be untenable
  as a default for desktop systems.
  
  (Roderick Greening) It would never be expected to encrypt a swap file
  which exists in a LVM encrypted drive. Given that to build a LVM system,
  you have to use the alternate cd, the user would be in total control of
  these choices. Via the regular live CD/DVD, LVM is not a option (that I
  recall), so encrypting the swap by default should not be problematic.
  
  (Paul Klapperich) As far as encrypted swap working with hibernate, it
  sounds like this goes nicely on computers that have a TPM as per the
  second link. I don't have one to test. For computers without a tpm, I
  don't know how ecryptfs works, but for luks we could perhaps use a pam
  module to hold the user account password for the duration of the login
  and set it as an alternate key for the luks swap partition (which
  previously had a random key only) if the user initiates a hibernate.
  Alternatively a global swap password could be created instead of (or
  somehow in addition to) random key encryption, but that's an extra
  password that now all users of the system would be required to know. It
  would, however, allow a resume from hibernate followed by a switch user
  if the person who hibernated is not present.
  
  (Przemysław Kulczycki) Will this block the system's ability to write
  crash dumps to swap partition and to save it from swap partition to file
  after a reboot?
  
  (Jerone Young) How can we start talking about something like this being
  by default when it has not even had field testing. If Jaunty is about
  stability this is not the way to go. Also since (from what I know) this
  is not being done in the kernel but rather in userspace, which is going
  to cause big performance issues when writing to swap. Another thing is
  where are the keys kept to decrypt the swap? How is a machine going to
  wake up from hibernation? This also will not work with the grub fast
  hibernation patches. Not a good idea to do at this time.
  
  Got sign off from Dustin on the content of the specification, ready for
  review -- evand

-- 
  Encrypted Swap as an Option
  
https://blueprints.edge.launchpad.net/ubuntu/+spec/server-karmic-encrypted-swap-as-an-option

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 

[Bug 418897] [NEW] Segfaults in apache2 with libapache2-mod-php5 installed

2009-08-25 Thread Pehr Söderman
Public bug reported:

Binary package hint: php5

Karmic, latest from aptitude.

[Tue Aug 25 23:18:12 2009] [notice] Apache/2.2.12 (Ubuntu) DAV/2 SVN/1.6.1 
PHP/5.2.10-2ubuntu2 with Suhosin-Patch mod_python/3.3.1 Python/2.6.2+ 
configured -- resuming
[Tue Aug 25 23:18:33 2009] [notice] child pid 17627 exit signal Segmentation 
fault (11)
[Tue Aug 25 23:18:36 2009] [notice] child pid 17628 exit signal Segmentation 
fault (11)
[Tue Aug 25 23:18:40 2009] [notice] child pid 17629 exit signal Segmentation 
fault (11)
[Tue Aug 25 23:18:41 2009] [notice] child pid 17630 exit signal Segmentation 
fault (11)
[Tue Aug 25 23:19:31 2009] [notice] child pid 17634 exit signal Segmentation 
fault (11)
[Tue Aug 25 23:20:21 2009] [notice] child pid 17637 exit signal Segmentation 
fault (11)
...

And so it continues. Fresh install of apache2. The following packages
that are relevant are installed:

libapache2-mod-php5 (5.2.10.dfsg.1-2ubuntu2)
php5 (5.2.10.dfsg.1-2ubuntu2)
php5-common (5.2.10.dfsg.1-2ubuntu2)
php5-suhosin ( 0.9.27-1)
php5-pgsql ( 5.2.10.dfsg.1-2ubuntu2)

Segmentation faults seems to be generated both regularly and triggered
by loading php pages.

** Affects: php5 (Ubuntu)
 Importance: Undecided
 Status: New

-- 
Segfaults in apache2 with libapache2-mod-php5 installed
https://bugs.launchpad.net/bugs/418897
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to php5 in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 369737] Re: preg_replace_callback segfaults

2009-08-25 Thread fiasco
From what I understand this is a PCRE extension issue with recursive
regex. This error occured for me when the mediawiki filter was trying to
parse a with the following regex:

  #^\{\|(.*?)(?:^\|\+(.*?))?(^(?:((?R))|.)*?)^\|}#msi

-- 
preg_replace_callback segfaults
https://bugs.launchpad.net/bugs/369737
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to php5 in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 134080] Re: CIFS: Navigating directories in DFS shares buggy

2009-08-25 Thread Leann Ogasawara
Could you test and confirm with the more recent 9.10 Karmic Alpha
release?  http://cdimage.ubuntu.com/releases/karmic .  Thanks.

** Changed in: linux (Ubuntu)
   Status: Incomplete = New

** Changed in: linux (Ubuntu)
   Status: New = Incomplete

-- 
CIFS: Navigating directories in DFS shares buggy
https://bugs.launchpad.net/bugs/134080
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs