[Bug 551799] New: Dosemu doesn't start except from root account
http://bugzilla.novell.com/show_bug.cgi?id=551799 Summary: Dosemu doesn't start except from root account Classification: openSUSE Product: openSUSE 11.2 Version: RC 2 Platform: i586 OS/Version: openSUSE 11.2 Status: NEW Severity: Critical Priority: P5 - None Component: Other AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: rcoo@free.fr QAContact: qa@suse.de Found By: --- User-Agent: Mozilla/5.0 (X11; U; Linux i686; de; rv:1.9.1.4) Gecko/20091016 SUSE/3.5.4-1.1.2 Firefox/3.5.4 The supplied dosemu crashes when launched from a user's account. This is a defect which appeared with the recent kernel updates (I discovered the bug after I updated my kernel under openSUSE 11.1). Reproducible: Always Steps to Reproduce: Try launching dosemu. Actual Results: LOWRAM mmap: Das Argument ist ungültig Speicherzugriffsfehler That is (in english) : LOWRAM mmap: Invalid argument Memory access failure. Expected Results: The xdosemu window, of course ! The only way, it seems, to launch dosemu is to launch it from a root console. VERY ANNOYING, indeed ! - and a security risk. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=551799 User rcoo@free.fr added comment http://bugzilla.novell.com/show_bug.cgi?id=551799#c1 --- Comment #1 from Robert Cabane <rcoo@free.fr> 2009-11-02 02:38:48 MST --- Bug mentioned here: http://sci.tech-archive.net/Archive/sci.electronics.design/2009-10/msg01190.... -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=551799 User rcoo@free.fr added comment http://bugzilla.novell.com/show_bug.cgi?id=551799#c2 --- Comment #2 from Robert Cabane <rcoo@free.fr> 2009-11-02 02:44:31 MST --- Bug reported in Debian : http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=505247 I don't understand the proposed solution at all ! Could you please investigate for a possible patch ? BTW, the inability of running Dosemu is a real pain for me (I'm using an old dBase application under Win3.1 and have NO other way to run it). -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=551799 User rcoo@free.fr added comment http://bugzilla.novell.com/show_bug.cgi?id=551799#c3 --- Comment #3 from Robert Cabane <rcoo@free.fr> 2009-11-02 02:50:56 MST --- Mentioned here: http://www.abclinuxu.cz/poradna/linux/show/279533;jsessionid=g2spmaoji8ph -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=551799 User rcoo@free.fr added comment http://bugzilla.novell.com/show_bug.cgi?id=551799#c4 --- Comment #4 from Robert Cabane <rcoo@free.fr> 2009-11-02 02:54:09 MST --- None of the suggested workarounds seem to work -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=551799 Stephan Kulow <coolo@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flag| |SHIP_STOPPER- -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=551799 zhu rensheng <rszhu@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |rszhu@novell.com AssignedTo|bnc-team-screening@forge.pr |snwint@novell.com |ovo.novell.com | -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=551799 User rcoo@free.fr added comment http://bugzilla.novell.com/show_bug.cgi?id=551799#c5 --- Comment #5 from Robert Cabane <rcoo@free.fr> 2009-11-09 01:36:47 MST --- Mentioned here: http://www.itworld.com/security/83917/an-important-linux-fix -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=551799 http://bugzilla.novell.com/show_bug.cgi?id=551799#c6 Martin Schreiber <fpmse@bluewin.ch> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |fpmse@bluewin.ch --- Comment #6 from Martin Schreiber <fpmse@bluewin.ch> 2009-11-24 16:51:14 UTC --- I can confirm the problem. Setting vm.mmap_min_addr to 0 does not help. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=551799 http://bugzilla.novell.com/show_bug.cgi?id=551799#c7 Joris Meijer <jorisenpetra@home.nl> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jorisenpetra@home.nl --- Comment #7 from Joris Meijer <jorisenpetra@home.nl> 2009-12-06 10:20:58 UTC --- I have the same issue, for me also setting vm.mmap_min_addr to 0 doesn't help although reading back vm.mmap_min_addr gives me 0. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=551799 http://bugzilla.novell.com/show_bug.cgi?id=551799#c8 Steffen Winterfeldt <snwint@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P4 - Low Severity|Critical |Normal --- Comment #8 from Steffen Winterfeldt <snwint@novell.com> 2009-12-07 12:51:16 CET --- The setting in /proc/sys/vm/mmap_min_addr is ignored with some active LSM; either selinux or apparmor. selinux is per default disabled in openSUSE. So, in addition to setting /proc/sys/vm/mmap_min_addr to 0 either disable apparmor (boot with apparmor=0) or create some suitable apparmor profile for dosemu (sorry, don't know how to do this). -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=551799 http://bugzilla.novell.com/show_bug.cgi?id=551799#c9 Steffen Winterfeldt <snwint@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |WONTFIX --- Comment #9 from Steffen Winterfeldt <snwint@novell.com> 2009-12-07 15:04:38 CET --- After looking into it somewhat I see no better way than 'apparmor=0'. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=551799 http://bugzilla.novell.com/show_bug.cgi?id=551799#c10 --- Comment #10 from Robert Cabane <rcoo@free.fr> 2009-12-09 21:04:22 UTC --- OK, I CAN launch dosemu as regular user after 1) I added apparmor=0 to the GRUB kernel command (not sooo bad, I think I needn't apparmor) 2) I edited /etc/sysctl.conf, changing the vm.mmap_min_addr setting to 0. This is not perfect, but works. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=551799 http://bugzilla.novell.com/show_bug.cgi?id=551799#c11 Ludwig Nussel <lnussel@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED CC| |security-team@suse.de, | |snwint@novell.com Version|RC 2 |Final Resolution|WONTFIX | AssignedTo|snwint@novell.com |kernel-maintainers@forge.pr | |ovo.novell.com --- Comment #11 from Ludwig Nussel <lnussel@novell.com> 2010-03-17 17:24:16 CET --- while the mmap_min_addr sysctl is unavoidable currently I guess the connection to apparmor is non-obvious. Why does it interfere here? There must be a better way than to switch it off entirely. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=551799 http://bugzilla.novell.com/show_bug.cgi?id=551799#c12 Jeff Mahoney <jeffm@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |RESOLVED CC| |jeffm@novell.com Resolution| |DUPLICATE --- Comment #12 from Jeff Mahoney <jeffm@novell.com> 2010-03-17 17:18:48 UTC --- It's because of CONFIG_LSM_MMAP_MIN_ADDR. It's not used as a default, it's used as a lower limit. The next kernel update resolves this issue. This is a duplicate of bnc#574654 *** This bug has been marked as a duplicate of bug 574654 *** http://bugzilla.novell.com/show_bug.cgi?id=574654 -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=551799 http://bugzilla.novell.com/show_bug.cgi?id=551799#c13 --- Comment #13 from Marcus Meissner <meissner@novell.com> 2010-03-18 23:49:03 UTC --- not quite a dup I guess. dosemu needs NULL mapped. The qemu fix above just allows getting it down to 0x1000. there is no way to allow it being NULL in the running system so far, AA effectively blocks that for everyone. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=551799 http://bugzilla.novell.com/show_bug.cgi?id=551799#c14 Ludwig Nussel <lnussel@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Resolution|DUPLICATE | --- Comment #14 from Ludwig Nussel <lnussel@novell.com> 2010-03-19 08:54:53 CET --- so reopening to clarify -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=551799 https://bugzilla.novell.com/show_bug.cgi?id=551799#c15 Jeff Mahoney <jeffm@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |RESOLVED Resolution| |FIXED --- Comment #15 from Jeff Mahoney <jeffm@novell.com> 2010-09-22 21:08:06 UTC --- For some reason the fix did not get pushed to 11.2 as expected in March. I've updated both 11.2 and 11.3 to allow mmap_min_addr to be set to 0. There may not be another 11.2 update for some time, so to get the fix faster please grab a new kernel from the Kernel:openSUSE-11.2 repository: http://download.opensuse.org/repositories/Kernel:/openSUSE-11.2/openSUSE_11.... The kernel with the fix should contain the following changelog entry: - Set LSM_MMAP_MIN_ADDR=0 to allow tools like DOSemu to work properly. The default is still set to 64k. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠novell.com