January 2025 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1236055] An attacker can access data of any TPM-backed encrypted system
by bugzilla_noreply＠suse.com 20 Jan '25

20 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1236055 Thorsten Kukuk <kukuk(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |kukuk(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1235801] [Build 20250108-SELinux] openQA test fails in samba server
by bugzilla_noreply＠suse.com 20 Jan '25

20 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235801 https://bugzilla.suse.com/show_bug.cgi?id=1235801#c3 --- Comment #3 from Cathy Hu <cathy.hu(a)suse.com> --- > might be useful to have /srv/samba labeled from the policy side fedora also does not do, it opening openqa ticket for that: https://progress.opensuse.org/issues/175839 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1235659] AUDIT-0: fwupd: new polkit action ins version 2.0
by bugzilla_noreply＠suse.com 20 Jan '25

20 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235659 https://bugzilla.suse.com/show_bug.cgi?id=1235659#c7 --- Comment #7 from Matthias Gerstner <matthias.gerstner(a)suse.com> --- As it stands this missed action deviates in its Polkit settings and allows local users to run it without authentication: org.freedesktop.fwupd.emulation-load (auth_admin:no:yes) I'm not sure if this is a good idea, or even necessary. I created an upstream issue to find out more about it: https://github.com/fwupd/fwupd/issues/8360 I will postpone the whitelisting fixup until this is resolved. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1132282] libncurses.so.6 uses the ncurses reentrant ABI
by bugzilla_noreply＠suse.com 20 Jan '25

20 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1132282 https://bugzilla.suse.com/show_bug.cgi?id=1132282#c14 --- Comment #14 from Dr. Werner Fink <werner(a)suse.com> --- The choice was taken a long time ago to have only two versions of ncurses available at build time a wide and a non-wide version. Otherwise it would be four versions (wide/non-wide)x(reentrant/normal) ... this is possible due to the second change from 20101023 + correct parsing of relative tab-stops in tabs program (report by Philip Ganchev). + adjust configure script so that "t" is not added to library suffix when weak-symbols are used, allowing the pthread configuration to more closely match the non-thread naming (report by Werner Fink). + modify configure check for tic program, used for fallbacks, to a warning if not found. This makes it simpler to use additional scripts to bootstrap the fallbacks code using tic from the build tree (report by Werner Fink). + fix several places in configure script using ${variable-value} form. + modify configure macro CF_LDFLAGS_STATIC to accommodate some loaders which do not support selectively linking against static libraries (report by John P. Hartmann) + fix an unescaped dash in man/tset.1 (report by Sven Joachim). ... switching back to the 2x2 matrix choice would require a recompile as well would break the alread existing compiled packages. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1236107] py2pack: AttributeError: 'NoneType' object has no attribute 'append'
by bugzilla_noreply＠suse.com 20 Jan '25

20 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1236107 Michal Suchanek <msuchanek(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |msuchanek(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1234775] [Build 20241220] openQA test fails in start_install
by bugzilla_noreply＠suse.com 20 Jan '25

20 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1234775 https://bugzilla.suse.com/show_bug.cgi?id=1234775#c12 --- Comment #12 from Dominique Leuenberger <dimstar(a)opensuse.org> --- Reference for follow-up: https://progress.opensuse.org/issues/175827 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1234775] [Build 20241220] openQA test fails in start_install
by bugzilla_noreply＠suse.com 20 Jan '25

20 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1234775 https://bugzilla.suse.com/show_bug.cgi?id=1234775#c11 Dominique Leuenberger <dimstar(a)opensuse.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |INVALID Status|NEW |RESOLVED --- Comment #11 from Dominique Leuenberger <dimstar(a)opensuse.org> --- (In reply to Lukas Ocilka from comment #10) > I'm afraid that we can't invest our precious time into "making it work with > 1GB of RAM" today and we will not be able to do it even tomorrow. > > DimStar, is there a real need for a "must have" like this? > > From my point of view, a VM with 1 GB works with an image and real HW > usually has much more nowadays. Moreover, as written by HuHa: If Qt does not > work, the system can still be installed with ncurses, zram enabled, etc. > Every additional library, Kernel firmware, libzypp cache or called binary > takes a bit more. Such investment into lower requirements would not pay off > mid to long-term anyway. I'm fine with accepting that 1GB is 'just not enough for the Qt based installer to work' I'll have QE adjust the tests to use 2GB -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1235801] [Build 20250108-SELinux] openQA test fails in samba server
by bugzilla_noreply＠suse.com 20 Jan '25

20 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235801 https://bugzilla.suse.com/show_bug.cgi?id=1235801#c2 --- Comment #2 from Cathy Hu <cathy.hu(a)suse.com> --- Reproducer for winbind https://openqa.opensuse.org/tests/4762511#step/server/11 zypper -n in samba samba-winbind systemctl start smb.service systemctl start winbind.service ---- time->Mon Jan 20 13:54:09 2025 type=AVC msg=audit(1737377649.785:1216): avc: denied { setgid } for pid=10435 comm="rpcd_lsad" capability=6 scontext=system_u:system_r:winbind_t:s0 tcontext=system_u:system_r:winbind_t:s0 tclass=capability permissive=0 ---- time->Mon Jan 20 13:54:10 2025 type=AVC msg=audit(1737377650.107:1226): avc: denied { setgid } for pid=10456 comm="rpcd_lsad" capability=6 scontext=system_u:system_r:winbind_t:s0 tcontext=system_u:system_r:winbind_t:s0 tclass=capability permissive=0 ---- time->Mon Jan 20 13:54:10 2025 type=AVC msg=audit(1737377650.421:1236): avc: denied { setgid } for pid=10477 comm="rpcd_lsad" capability=6 scontext=system_u:system_r:winbind_t:s0 tcontext=system_u:system_r:winbind_t:s0 tclass=capability permissive=0 ---- time->Mon Jan 20 13:54:10 2025 type=AVC msg=audit(1737377650.743:1246): avc: denied { setgid } for pid=10498 comm="rpcd_lsad" capability=6 scontext=system_u:system_r:winbind_t:s0 tcontext=system_u:system_r:winbind_t:s0 tclass=capability permissive=0 also coredump in journal: [2025/01/20 13:54:09.787569, 0] ../../lib/util/fault.c:179(smb_panic_log) INTERNAL ERROR: sys_setgroups failed in rpcd_lsad () () pid 10435 (4.21.3-git.385.dab50f14578SUSE-oS16.9-x86_64) ------------ Reproducer for nmb https://openqa.opensuse.org/tests/4762511#step/server/18: systemctl start nmb.service ---- time->Mon Jan 20 13:59:56 2025 type=AVC msg=audit(1737377996.527:1288): avc: denied { create } for pid=10577 comm="nmbd" name="nmbd.pid" scontext=system_u:system_r:nmbd_t:s0 tcontext=system_u:object_r:smbd_var_run_t:s0 tclass=file permissive=0 localhost:~ # smbcontrol -t 2 nmbd ping Can't find pid for destination 'nmbd' -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1235659] AUDIT-0: fwupd: new polkit action ins version 2.0
by bugzilla_noreply＠suse.com 20 Jan '25

20 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235659 https://bugzilla.suse.com/show_bug.cgi?id=1235659#c6 --- Comment #6 from Matthias Gerstner <matthias.gerstner(a)suse.com> --- (In reply to dimstar(a)opensuse.org from comment #5) > Just rebuilt in my branch > > There is still one polkit related error showing up: > > [ 172s] fwupd.x86_64: E: polkit-user-privilege (Badness: 10000) org.freedesktop.fwupd.emulation-load (auth_admin:no:yes) > > that one was indeed not part of https://github.com/openSUSE/polkit-default-privs/commit/210cd19ca8efe7a2001… Darn, this must have escaped me, since there is a newline between this action and the rest of the block of actions listed in comment 0. I'll send out a follow-up to address this. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1234775] [Build 20241220] openQA test fails in start_install
by bugzilla_noreply＠suse.com 20 Jan '25

20 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1234775 https://bugzilla.suse.com/show_bug.cgi?id=1234775#c10 --- Comment #10 from Lukas Ocilka <locilka(a)suse.com> --- I'm afraid that we can't invest our precious time into "making it work with 1GB of RAM" today and we will not be able to do it even tomorrow. DimStar, is there a real need for a "must have" like this? From my point of view, a VM with 1 GB works with an image and real HW usually has much more nowadays. Moreover, as written by HuHa: If Qt does not work, the system can still be installed with ncurses, zram enabled, etc. Every additional library, Kernel firmware, libzypp cache or called binary takes a bit more. Such investment into lower requirements would not pay off mid to long-term anyway. -- You are receiving this mail because: You are on the CC list for the bug.

1 0