http://bugzilla.novell.com/show_bug.cgi?id=551799 User rcoo@free.fr added comment http://bugzilla.novell.com/show_bug.cgi?id=551799#c1 --- Comment #1 from Robert Cabane 2009-11-02 02:38:48 MST --- Bug mentioned here: http://sci.tech-archive.net/Archive/sci.electronics.design/2009-10/msg01190.... -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=551799 User rcoo@free.fr added comment http://bugzilla.novell.com/show_bug.cgi?id=551799#c3 --- Comment #3 from Robert Cabane 2009-11-02 02:50:56 MST --- Mentioned here: http://www.abclinuxu.cz/poradna/linux/show/279533;jsessionid=g2spmaoji8ph -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=551799 Stephan Kulow changed: What |Removed |Added ---------------------------------------------------------------------------- Flag| |SHIP_STOPPER- -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=551799 User rcoo@free.fr added comment http://bugzilla.novell.com/show_bug.cgi?id=551799#c5 --- Comment #5 from Robert Cabane 2009-11-09 01:36:47 MST --- Mentioned here: http://www.itworld.com/security/83917/an-important-linux-fix -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=551799 http://bugzilla.novell.com/show_bug.cgi?id=551799#c7 Joris Meijer changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jorisenpetra@home.nl --- Comment #7 from Joris Meijer 2009-12-06 10:20:58 UTC --- I have the same issue, for me also setting vm.mmap_min_addr to 0 doesn't help although reading back vm.mmap_min_addr gives me 0. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=551799 http://bugzilla.novell.com/show_bug.cgi?id=551799#c9 Steffen Winterfeldt changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |WONTFIX --- Comment #9 from Steffen Winterfeldt 2009-12-07 15:04:38 CET --- After looking into it somewhat I see no better way than 'apparmor=0'. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=551799 http://bugzilla.novell.com/show_bug.cgi?id=551799#c11 Ludwig Nussel changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED CC| |security-team@suse.de, | |snwint@novell.com Version|RC 2 |Final Resolution|WONTFIX | AssignedTo|snwint@novell.com |kernel-maintainers@forge.pr | |ovo.novell.com --- Comment #11 from Ludwig Nussel 2010-03-17 17:24:16 CET --- while the mmap_min_addr sysctl is unavoidable currently I guess the connection to apparmor is non-obvious. Why does it interfere here? There must be a better way than to switch it off entirely. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=551799 http://bugzilla.novell.com/show_bug.cgi?id=551799#c13 --- Comment #13 from Marcus Meissner 2010-03-18 23:49:03 UTC --- not quite a dup I guess. dosemu needs NULL mapped. The qemu fix above just allows getting it down to 0x1000. there is no way to allow it being NULL in the running system so far, AA effectively blocks that for everyone. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=551799 https://bugzilla.novell.com/show_bug.cgi?id=551799#c15 Jeff Mahoney changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |RESOLVED Resolution| |FIXED --- Comment #15 from Jeff Mahoney 2010-09-22 21:08:06 UTC --- For some reason the fix did not get pushed to 11.2 as expected in March. I've updated both 11.2 and 11.3 to allow mmap_min_addr to be set to 0. There may not be another 11.2 update for some time, so to get the fix faster please grab a new kernel from the Kernel:openSUSE-11.2 repository: http://download.opensuse.org/repositories/Kernel:/openSUSE-11.2/openSUSE_11.... The kernel with the fix should contain the following changelog entry: - Set LSM_MMAP_MIN_ADDR=0 to allow tools like DOSemu to work properly. The default is still set to 64k. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.