April 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1221840] podman with pasta (passt) fails with apparmor
by bugzilla_noreply＠suse.com 01 Apr '24

01 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1221840 https://bugzilla.suse.com/show_bug.cgi?id=1221840#c10 --- Comment #10 from Stefano Brivio <sbrivio(a)redhat.com> --- Created attachment 873969 --> https://bugzilla.suse.com/attachment.cgi?id=873969&action=edit Proposed upstream patch, tested on Debian only With these changes: - remounting / from an empty mountpoint should now be allowed by AppArmor across AppArmor commit d4b0fef10a4a ("parser: fix rule flag generation change_mount type rules") - access to the filesystem-bound network namespace typically used by Podman's custom networks or Buildah (not 'podman run') is now enabled for pasta, as well -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1221840] podman with pasta (passt) fails with apparmor
by bugzilla_noreply＠suse.com 01 Apr '24

01 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1221840 https://bugzilla.suse.com/show_bug.cgi?id=1221840#c9 --- Comment #9 from Stefano Brivio <sbrivio(a)redhat.com> --- (In reply to Danish Prakash from comment #7) > I tried overriding the symlinks with hardlinks on openSUSE TW[1] > > [...] > > [1] - > https://build.opensuse.org/projects/home:danishprakash:branches: > Virtualization:containers/packages/passt/files/passt.spec?expand=1 This change looks good to me, by the way. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1221840] podman with pasta (passt) fails with apparmor
by bugzilla_noreply＠suse.com 01 Apr '24

01 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1221840 https://bugzilla.suse.com/show_bug.cgi?id=1221840#c8 Stefano Brivio <sbrivio(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo?(sbrivio(a)redhat.co | |m) --- Comment #8 from Stefano Brivio <sbrivio(a)redhat.com> --- (In reply to Danish Prakash from comment #7) > I tried overriding the symlinks with hardlinks on openSUSE TW[1] but I'm > running into the same error. Updated usr.bin.pasta AppArmor profile with the > rules shared here additionally, invoking `pasta` gives: > > > mount /: Permission denied > > Failed to sandbox process, exiting I just reproduced this on Debian -- by mistake, the package there correctly creates a hard link, but doesn't install a separate usr.bin.pasta profile, and if I just copy the one we ship upstream, I hit the same problem. Give me a bit to fix that upstream and I'll get back to you. > `passt` also fails with the same error but not before displaying (template) > interface details. In the package changes, I've added a profile for pasta, a > replica of usr.bin.passt jfyi. By the way, it shouldn't be a replica, that's the whole point of the hard link, so that different profiles get attached to /usr/bin/pasta and /usr/bin/passt. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1215663] # CONFIG_SCHED_AUTOGROUP is not set causes Fossilize INFO: Autogroup scheduling is not enabled on this kernel. Will rely entirely on nice().
by bugzilla_noreply＠suse.com 01 Apr '24

01 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1215663 https://bugzilla.suse.com/show_bug.cgi?id=1215663#c4 --- Comment #4 from Takashi Iwai <tiwai(a)suse.com> --- Looking at the code, the feature seems to be dynamically controllable via sysctl. It might make sense to enable the kconfig while setting the default to off and let user enabling it via sysctl (maybe along with some other tunable knobs for desktops)? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1222181] Discover Updates - Update Issue
by bugzilla_noreply＠suse.com 01 Apr '24

01 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1222181 Chenzi Cao <chcao(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|screening-team-bugs(a)suse.de |pgajdos(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1133158] VUL-1: CVE-2019-0223: qpid-proton: Apache Qpid Proton TLS Man in the Middle Vulnerability
by bugzilla_noreply＠suse.com 01 Apr '24

01 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1133158 https://bugzilla.suse.com/show_bug.cgi?id=1133158#c7 --- Comment #7 from Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> --- SUSE-SU-2024:1074-1: An update that solves one vulnerability and has four security fixes can now be installed. Category: security (important) Bug References: 1041090, 1084627, 1133158, 1172267, 1191783 CVE References: CVE-2019-0223 Maintenance Incident: [SUSE:Maintenance:33149](https://smelt.suse.de/incident/33149/) Sources used: openSUSE Leap 15.5 (src): qpid-proton-0.38.0-150000.6.3.1 SUSE Package Hub 15 15-SP5 (src): qpid-proton-0.38.0-150000.6.3.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1191783] [SLPP] qpid-proton: E: shlib-policy-name-error
by bugzilla_noreply＠suse.com 01 Apr '24

01 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1191783 https://bugzilla.suse.com/show_bug.cgi?id=1191783#c3 --- Comment #3 from Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> --- SUSE-SU-2024:1074-1: An update that solves one vulnerability and has four security fixes can now be installed. Category: security (important) Bug References: 1041090, 1084627, 1133158, 1172267, 1191783 CVE References: CVE-2019-0223 Maintenance Incident: [SUSE:Maintenance:33149](https://smelt.suse.de/incident/33149/) Sources used: openSUSE Leap 15.5 (src): qpid-proton-0.38.0-150000.6.3.1 SUSE Package Hub 15 15-SP5 (src): qpid-proton-0.38.0-150000.6.3.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1172267] [TRACKERBUG] OpenSSL 3.0.0 upgrade tracker bug
by bugzilla_noreply＠suse.com 01 Apr '24

01 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1172267 https://bugzilla.suse.com/show_bug.cgi?id=1172267#c10 --- Comment #10 from Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> --- SUSE-SU-2024:1074-1: An update that solves one vulnerability and has four security fixes can now be installed. Category: security (important) Bug References: 1041090, 1084627, 1133158, 1172267, 1191783 CVE References: CVE-2019-0223 Maintenance Incident: [SUSE:Maintenance:33149](https://smelt.suse.de/incident/33149/) Sources used: openSUSE Leap 15.5 (src): qpid-proton-0.38.0-150000.6.3.1 SUSE Package Hub 15 15-SP5 (src): qpid-proton-0.38.0-150000.6.3.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1041090] trackerbug: packages do not build reproducibly from unsorted input
by bugzilla_noreply＠suse.com 01 Apr '24

01 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1041090 https://bugzilla.suse.com/show_bug.cgi?id=1041090#c133 --- Comment #133 from Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> --- SUSE-SU-2024:1074-1: An update that solves one vulnerability and has four security fixes can now be installed. Category: security (important) Bug References: 1041090, 1084627, 1133158, 1172267, 1191783 CVE References: CVE-2019-0223 Maintenance Incident: [SUSE:Maintenance:33149](https://smelt.suse.de/incident/33149/) Sources used: openSUSE Leap 15.5 (src): qpid-proton-0.38.0-150000.6.3.1 SUSE Package Hub 15 15-SP5 (src): qpid-proton-0.38.0-150000.6.3.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1084627] GCC 8: qpid-proton build fails
by bugzilla_noreply＠suse.com 01 Apr '24

01 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1084627 https://bugzilla.suse.com/show_bug.cgi?id=1084627#c3 --- Comment #3 from Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> --- SUSE-SU-2024:1074-1: An update that solves one vulnerability and has four security fixes can now be installed. Category: security (important) Bug References: 1041090, 1084627, 1133158, 1172267, 1191783 CVE References: CVE-2019-0223 Maintenance Incident: [SUSE:Maintenance:33149](https://smelt.suse.de/incident/33149/) Sources used: openSUSE Leap 15.5 (src): qpid-proton-0.38.0-150000.6.3.1 SUSE Package Hub 15 15-SP5 (src): qpid-proton-0.38.0-150000.6.3.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0