http://bugzilla.suse.com/show_bug.cgi?id=1060072 http://bugzilla.suse.com/show_bug.cgi?id=1060072#c1 Larry Finger changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #1 from Larry Finger --- I have made the suggested changes. Thanks for the clear description of the problem. The commit message for the new version are as follows: - Make changes suggested in bsc#1060072 The specific changes are: (1) Remove the test in vboxdrv.sh as the script tests for the wrong file. This is safe because if the package is not installed, the script will not be there. (2) Move VBoxDbg.so to package virtualbox-qt. With this change, packages libQt5Core, libQt5Gui and libQt5Widgets are no longer needed with package virtualbox. As a result, a text-only server no longer needs to load QT to support headless virtual machines. I believe that these two changes fix your issue. -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1060072 http://bugzilla.suse.com/show_bug.cgi?id=1060072#c3 --- Comment #3 from Larry Finger --- It will take a while for the new code to propagate through to a new TW snapshot, but you should be able to grab the VB RPMs as soon as project Virtualization/virtualbox finishes building. The link is https://build.opensuse.org/package/show/Virtualization/virtualbox. Click on the openSUSE_Factory link to get to the repos. -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1060072 http://bugzilla.suse.com/show_bug.cgi?id=1060072#c5 --- Comment #5 from Bernhard Wiedemann --- This is an autogenerated message for OBS integration: This bug (1060072) was mentioned in https://build.opensuse.org/request/show/528710 Factory / virtualbox -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1060072 http://bugzilla.suse.com/show_bug.cgi?id=1060072#c7 --- Comment #7 from Bernhard Wiedemann --- This is an autogenerated message for OBS integration: This bug (1060072) was mentioned in https://build.opensuse.org/request/show/531262 42.2 / virtualbox -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1060072 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| |obs:running:7335:moderate -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1060072 http://bugzilla.suse.com/show_bug.cgi?id=1060072#c11 --- Comment #11 from Swamp Workflow Management --- openSUSE-RU-2017:2680-1: An update that has one recommended fix can now be installed. Category: recommended (moderate) Bug References: 1060072 CVE References: Sources used: openSUSE Leap 42.3 (src): virtualbox-5.1.28-34.1 openSUSE Leap 42.2 (src): virtualbox-5.1.28-19.41.1 -- You are receiving this mail because: You are on the CC list for the bug.

VIRTUALBOX="${INSTALL_DIR}/VirtualBox" VBOXMANAGE="${INSTALL_DIR}/VBoxManage" BUILDINTMP="${MODULE_SRC}/build_in_tmp" if test -u "${VIRTUALBOX}"; then GROUP=root DEVICE_MODE=0600 else GROUP=vboxusers DEVICE_MODE=0660 fi With the change, INSTALL_DIR is empty, resulting in VIRTUALBOX=/VirtualBox and VBOXMANAGE=/VBoxManage. INSTALL_DIR should be set to /usr/lib/virtualbox. VIRTUALBOX is only used in the "test -u" above. As VirtualBox is no longer in

http://bugzilla.suse.com/show_bug.cgi?id=1060072 http://bugzilla.suse.com/show_bug.cgi?id=1060072#c12 Ralf Friedl changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Resolution|FIXED |--- --- Comment #12 from Ralf Friedl --- There are some minor problems with the modified /usr/lib/virtualbox/vboxdrv.sh, and some that were also present before. Modified /usr/lib/virtualbox/vboxdrv.sh:55 the virtualbox package it should test for the permission of VBOXMANAGE, which should be the same, whether from /etc/permissions.easy, /etc/permissions.paranoid or /etc/permissions.secure. VBOXMANAGE is also used to shut down the running machines in stop_vms. I suggest to change it to this:

INSTALL_DIR=/usr/lib/virtualbox VBOXMANAGE="${INSTALL_DIR}/VBoxManage" BUILDINTMP="${MODULE_SRC}/build_in_tmp" if test -u "${VBOXMANAGE}"; then GROUP=root DEVICE_MODE=0600 else GROUP=vboxusers DEVICE_MODE=0660 fi

The GROUP and DEVICE_MODE are only used in setup, which is only called explicitly or in start when the modprobe vboxdrv fails. That means that as long as the matching virtualbox-host-kmp is installed, setup will not be called and the value of GROUP and DEVICE_MODE doesn't matter. But setup doesn't just compile the kernel modules, it also creates a file /etc/udev/rules.d/60-vboxdrv.rules, so setup not being called means that ./etc/udev/rules.d/60-vboxdrv.rules is not created. The file looks like this. The values of MODE and GROUP may vary depending on the setuid in the test above.

KERNEL=="vboxdrv", NAME="vboxdrv", OWNER="root", GROUP="root", MODE="0600" KERNEL=="vboxdrvu", NAME="vboxdrvu", OWNER="root", GROUP="root", MODE="0666" KERNEL=="vboxnetctl", NAME="vboxnetctl", OWNER="root", GROUP="root", MODE="0600" SUBSYSTEM=="usb_device", ACTION=="add", RUN+="/usr/lib/virtualbox/VBoxCreateUSBNode.sh $major $minor $attr{bDeviceClass}" SUBSYSTEM=="usb", ACTION=="add", ENV{DEVTYPE}=="usb_device", RUN+="/usr/lib/virtualbox/VBoxCreateUSBNode.sh $major $minor $attr{bDeviceClass}" SUBSYSTEM=="usb_device", ACTION=="remove", RUN+="/usr/lib/virtualbox/VBoxCreateUSBNode.sh --remove $major $minor" SUBSYSTEM=="usb", ACTION=="remove", ENV{DEVTYPE}=="usb_device", RUN+="/usr/lib/virtualbox/VBoxCreateUSBNode.sh --remove $major $minor" I don't know what exactly this file does, and on my headless machine I don't use USB devices in VirtualBox, so it probably doesn't matter. On the other hand, if the script generates this file, there will probably be a reason for it.

Regarding headless mode, these files require X11 libraries and are not needed for headless mode. I have running virtual machines without these files present at the moment, and without X11 libraries. These files could be moved to virtualbox-qt. /usr/bin/VBoxSDL /usr/lib/virtualbox/VBoxKeyboard.so /usr/lib/virtualbox/VBoxOGLrenderspu.so /usr/lib/virtualbox/VBoxSDL /usr/lib/virtualbox/VBoxSDL.so /usr/lib/virtualbox/VBoxSharedClipboard.so /usr/lib/virtualbox/VBoxSharedCrOpenGL.so -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1060072 http://bugzilla.suse.com/show_bug.cgi?id=1060072#c15 --- Comment #15 from Bernhard Wiedemann --- This is an autogenerated message for OBS integration: This bug (1060072) was mentioned in https://build.opensuse.org/request/show/539174 42.2 / virtualbox -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1060072 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| |obs:running:7450:moderate -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1060072 http://bugzilla.suse.com/show_bug.cgi?id=1060072#c17 --- Comment #17 from Swamp Workflow Management --- openSUSE-SU-2017:2975-1: An update that fixes four vulnerabilities is now available. Category: security (moderate) Bug References: 1060072,1064200,1066488 CVE References: CVE-2017-10392,CVE-2017-10407,CVE-2017-10408,CVE-2017-10428 Sources used: openSUSE Leap 42.3 (src): virtualbox-5.1.30-39.1 openSUSE Leap 42.2 (src): virtualbox-5.1.30-19.46.1 -- You are receiving this mail because: You are on the CC list for the bug.