[Bug 1701073] Re: CVE-2017-2619 regression breaks symlinks to directories

2017-06-30 Thread Andreas Hasenack
Testing this branch for artful: https://code.launchpad.net/~ahasenack/ubuntu/+source/samba/+git/samba/+ref /artful-samba-dir-symlink-1701073 -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to the bug report.

[Bug 1701073] Re: CVE-2017-2619 regression breaks symlinks

2017-06-30 Thread Andreas Hasenack
Confirmed. The bug will happen wherever opening a symlink to a directory with O_DIRECTORY||O_NOFOLLOW returns ENOTDIR instead of ELOOP (and you have to be using protocol SMB2 or higher): xenial: andreas@nsn7:~$ mkdir -p /tmp/cve/a andreas@nsn7:~$ ln -s /tmp/cve/a /tmp/cve/b andreas@nsn7:~$ python

[Bug 1701073] Re: CVE-2017-2619 regression breaks symlinks

2017-06-30 Thread Andreas Hasenack
Note: if you use smbclient with -m SMB2, which is what windows7+ uses, you will see the same failure when doing "ls /opt/opt/*": root@xenial-samba-symlink-1701073:~# smbclient //localhost/cve-root -U ubuntu%ubuntu -c "ls /opt/opt/*" WARNING: The "syslog" option is deprecated Domain=[WORKGROUP]

[Bug 1701073] Re: CVE-2017-2619 regression breaks symlinks

2017-06-30 Thread Andreas Hasenack
Ok, checking out what's going on here. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/1701073 Title: CVE-2017-2619 regression breaks symlinks To manage notifications about this bug

[Bug 1536181] Re: bind9-resolvconf service doesn't work

2017-06-30 Thread Andreas Hasenack
** Merge proposal unlinked: https://code.launchpad.net/~ahasenack/ubuntu/+source/bind9/+git/bind9/+merge/326619 -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/1536181 Title:

[Bug 1701687] Re: Please merge 1:9.10.3.dfsg.P4-10.1ubuntu6 -> 1:9.10.3.dfsg.P4-12.3

2017-06-30 Thread Andreas Hasenack
** Merge proposal linked: https://code.launchpad.net/~ahasenack/ubuntu/+source/bind9/+git/bind9/+merge/326619 -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to bind9 in Ubuntu. https://bugs.launchpad.net/bugs/1701687 Title: Please

[Bug 1701687] [NEW] Please merge 1:9.10.3.dfsg.P4-10.1ubuntu6 -> 1:9.10.3.dfsg.P4-12.3

2017-06-30 Thread Andreas Hasenack
Public bug reported: Please sync with debian and merge 1:9.10.3.dfsg.P4-10.1ubuntu6 -> 1:9.10.3.dfsg.P4-12.3 ** Affects: bind9 (Ubuntu) Importance: Low Assignee: Andreas Hasenack (ahasenack) Status: In Progress -- You received this bug notification because you are a member

[Bug 1700611] Re: sources.list file created for ESM is world-readable, leaks subscriber token to all local users

2017-06-30 Thread Andreas Hasenack
** Also affects: ubuntu-advantage-script via https://github.com/CanonicalLtd/ubuntu-advantage-script/issues/22 Importance: Unknown Status: Unknown -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to ubuntu-advantage-tools in

[Bug 1700611] Re: sources.list file created for ESM is world-readable, leaks subscriber token to all local users

2017-06-30 Thread Andreas Hasenack
There seems to be a difference in behavior in apt. Precise's apt-cache, for example, doesn't seem to care: ubuntu@precise-esm:~$ l /etc/apt/sources.list.d/staging-ubuntu-esm-precise.list -rw--- 1 root root 200 Jun 7 18:35 /etc/apt/sources.list.d/staging-ubuntu-esm-precise.list