April 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1221840] podman with pasta (passt) fails with apparmor
by bugzilla_noreply＠suse.com 01 Apr '24

01 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1221840 https://bugzilla.suse.com/show_bug.cgi?id=1221840#c14 --- Comment #14 from Danish Prakash <danish.prakash(a)suse.com> --- Thanks for the patch, even though I can invoke `pasta` without any errors, I'm still getting the same permission denied error on the netns: > Couldn't open network namespace /proc/9080/ns/net: Permission denied Adding the following rule to usr.bin.passt doesn't help either: > /proc/@{pid}/ns/ r, On the contrary, setting the two usr.bin.pas* profiles to complain mode, things are back to normal so perhaps the rules are still not right? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1222186] VirtualBox not allowed to access USB devices although user is in vboxusers group
by bugzilla_noreply＠suse.com 01 Apr '24

01 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1222186 Charles Arnold <carnold(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|virt-bugs(a)suse.de |llrainey15(a)gmail.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1133158] VUL-1: CVE-2019-0223: qpid-proton: Apache Qpid Proton TLS Man in the Middle Vulnerability
by bugzilla_noreply＠suse.com 01 Apr '24

01 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1133158 https://bugzilla.suse.com/show_bug.cgi?id=1133158#c9 Fridrich Strba <fstrba(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|screening-team-bugs(a)suse.de |security-team(a)suse.de --- Comment #9 from Fridrich Strba <fstrba(a)suse.com> --- . -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1133158] VUL-1: CVE-2019-0223: qpid-proton: Apache Qpid Proton TLS Man in the Middle Vulnerability
by bugzilla_noreply＠suse.com 01 Apr '24

01 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1133158 https://bugzilla.suse.com/show_bug.cgi?id=1133158#c8 Fridrich Strba <fstrba(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|fstrba(a)suse.com |screening-team-bugs(a)suse.de --- Comment #8 from Fridrich Strba <fstrba(a)suse.com> --- Released, so assigning to security for closing. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1222186] VirtualBox not allowed to access USB devices although user is in vboxusers group
by bugzilla_noreply＠suse.com 01 Apr '24

01 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1222186 https://bugzilla.suse.com/show_bug.cgi?id=1222186#c8 Claudio Marcial Peon <claudio(a)datacor.net.ar> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |claudio(a)datacor.net.ar --- Comment #8 from Claudio Marcial Peon <claudio(a)datacor.net.ar> --- Thanks Robert. I can confirm that making those changes you suggest on https://bugzilla.suse.com/show_bug.cgi?id=1222186#c3 everything works again. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1219522] Kernel panic with 6.7.x version
by bugzilla_noreply＠suse.com 01 Apr '24

01 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1219522 https://bugzilla.suse.com/show_bug.cgi?id=1219522#c30 --- Comment #30 from Edwin KM <e.kleinmentink(a)zonnet.nl> --- installed kernel-default-6.8.2-2.1.gb88b81e.x86_64.rpm and restarted about 20 times. Can not trigger the kernel panic. Is it possible the issue is fixed recently? I assume we should look at https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/log/driv…. This commit seems suspicious because it seems a timing issue: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/d… Not sure if that would even result in a kernel panic. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1221803] plasma6 - several processes dumping core
by bugzilla_noreply＠suse.com 01 Apr '24

01 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1221803 https://bugzilla.suse.com/show_bug.cgi?id=1221803#c2 Reinhard Mutz <Reinhard.Mutz(a)frei-leipzig.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |Reinhard.Mutz@frei-leipzig. | |de --- Comment #2 from Reinhard Mutz <Reinhard.Mutz(a)frei-leipzig.de> --- I suffered from the same bug and at least I found a workaround. First to say I installed a new fresh version of tumblewee, dated 2024-03-24, on my laptop and it work perfect. My working machine has an Intel(R) Core(TM) i7-3770K CPU and 16 GB of RAM. I use TW from the very beginning and I am happy with that. After an update in the last days of February plasma coulnd be started. I did a lot of work and ended up with a workaround. I fount that my current installed plama uses a direct in /home/user/... but the new intalled plasma uses a directory /usr/local/share/plasma/.... My workaround: scp -p -r /usr/share/plasma $HOME/.local/share/ After a relogin it worked and showed my saved sessions as it did before. more details: I started plasma "strace plasmashell" > plasmash.log 2>&1". You can see all commands before the crash "tail -50 plasmash.log". The log tells You that the directories /usr/share/plasma $HOME/.local/share/ are in some way mismatched. proposal for solution: the maintainers of plasma may please decide which directory to use and give hints for any updates. I did not expect such a behaviour because I used KDE3 and saw all updates up to version KDE5 worked correctly. From my point of view (experience) I would never expect such an error but nobody is perfect. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1221840] podman with pasta (passt) fails with apparmor
by bugzilla_noreply＠suse.com 01 Apr '24

01 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1221840 https://bugzilla.suse.com/show_bug.cgi?id=1221840#c13 Stefano Brivio <sbrivio(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #873969|0 |1 is obsolete| | --- Comment #13 from Stefano Brivio <sbrivio(a)redhat.com> --- Created attachment 873970 --> https://bugzilla.suse.com/attachment.cgi?id=873970&action=edit Fixed patch for comment #10 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1221840] podman with pasta (passt) fails with apparmor
by bugzilla_noreply＠suse.com 01 Apr '24

01 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1221840 https://bugzilla.suse.com/show_bug.cgi?id=1221840#c12 --- Comment #12 from Stefano Brivio <sbrivio(a)redhat.com> --- Comment on attachment 873969 --> https://bugzilla.suse.com/attachment.cgi?id=873969 Proposed upstream patch, tested on Debian only >diff --git a/contrib/apparmor/abstractions/passt b/contrib/apparmor/abstractions/passt >index 6bb25e0..61ec32c 100644 >--- a/contrib/apparmor/abstractions/passt >+++ b/contrib/apparmor/abstractions/passt >@@ -27,6 +27,7 @@ > > / r, # isolate_prefork(), isolation.c > mount options=(rw, runbindable) /, >+ mount "" -> "/", > mount "" -> "/tmp/", > pivot_root "/tmp/" -> "/tmp/", > umount "/", >diff --git a/contrib/apparmor/abstractions/pasta b/contrib/apparmor/abstractions/pasta >index a890391..e10d2a7 100644 >--- a/contrib/apparmor/abstractions/pasta >+++ b/contrib/apparmor/abstractions/pasta >@@ -27,7 +27,7 @@ > @{PROC}/@{pid}/net/udp r, > @{PROC}/@{pid}/net/udp6 r, > >- @{run}/user/@{uid}/netns/* r, # pasta_open_ns(), pasta.c >+ @{run}/user/@{uid}/** r, # pasta_open_ns(), pasta.c > > @{PROC}/[0-9]*/ns/net r, # pasta_wait_for_ns(), > @{PROC}/[0-9]*/ns/user r, # conf_pasta_ns() -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1221840] podman with pasta (passt) fails with apparmor
by bugzilla_noreply＠suse.com 01 Apr '24

01 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1221840 https://bugzilla.suse.com/show_bug.cgi?id=1221840#c11 --- Comment #11 from Stefano Brivio <sbrivio(a)redhat.com> --- ...Danish, it would be great if you could apply the changes from comment #10 and give it a try on openSUSE Tumbleweed. If that works, I'll send that upstream and you should get it back in the source archive in a couple of days. Thanks. -- You are receiving this mail because: You are on the CC list for the bug.

1 0