[Bug 816456] New: Problem with: lxc.autodev=1
ls -ald /dev/* crw-rw---- 1 root tty 136, 16 Apr 20 18:34 /dev/console lrwxrwxrwx 1 root root 11 Apr 20 18:34 /dev/core -> /proc/kcore lrwxrwxrwx 1 root root 13 Apr 20 18:34 /dev/fd -> /proc/self/fd crwxr-xr-x 1 root root 1, 7 Apr 20 18:34 /dev/full drwxr-xr-x 2 root root 0 Apr 20 18:34 /dev/hugepages
https://bugzilla.novell.com/show_bug.cgi?id=816456 https://bugzilla.novell.com/show_bug.cgi?id=816456#c0 Summary: Problem with: lxc.autodev=1 Classification: openSUSE Product: openSUSE 12.3 Version: Final Platform: x86-64 OS/Version: openSUSE 12.3 Status: NEW Severity: Normal Priority: P5 - None Component: Other AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: aotto1968@t-online.de QAContact: qa-bugs@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.64 Safari/537.31 my problem: the "autodev" create devices with wrong permissions: prw------- 1 root root 0 Apr 20 18:34 /dev/initctl lrwxrwxrwx 1 root root 7 Apr 20 18:34 /dev/kmsg -> console srw-rw-rw- 1 root root 0 Apr 20 18:34 /dev/log drwxrwxrwt 2 root root 40 Apr 20 18:34 /dev/mqueue crwxr-xr-x 1 root root 1, 3 Apr 20 18:34 /dev/null lrwxrwxrwx 1 root root 13 Apr 20 18:34 /dev/ptmx -> /dev/pts/ptmx drwxr-xr-x 2 root root 0 Apr 20 18:34 /dev/pts crwxr-xr-x 1 root root 1, 8 Apr 20 18:34 /dev/random drwxrwxrwt 2 root root 40 Apr 20 18:34 /dev/shm lrwxrwxrwx 1 root root 15 Apr 20 18:34 /dev/stderr -> /proc/self/fd/2 lrwxrwxrwx 1 root root 15 Apr 20 18:34 /dev/stdin -> /proc/self/fd/0 lrwxrwxrwx 1 root root 15 Apr 20 18:34 /dev/stdout -> /proc/self/fd/1 crwxr-xr-x 1 root root 5, 0 Apr 20 18:34 /dev/tty crw-rw---- 1 root tty 136, 12 Apr 20 18:34 /dev/tty1 crw-rw---- 1 root tty 136, 13 Apr 20 18:34 /dev/tty2 crw-rw---- 1 root tty 136, 14 Apr 20 18:34 /dev/tty3 crw-rw---- 1 root tty 136, 15 Apr 20 18:34 /dev/tty4 crwxr-xr-x 1 root root 1, 9 Apr 20 18:34 /dev/urandom crwxr-xr-x 1 root root 1, 5 Apr 20 18:34 /dev/zero check the permissions for "/dev/tty" or "/dev/null" as example. a "normal" user is not able to use these devices ... example: login into an non-root-user account.
ssh dev01@nhi2 ... Last login: Sat Apr 20 18:34:29 2013 from linux02 Have a lot of fun... -bash: /dev/null: Permission denied -bash: /dev/null: Permission denied -bash: /dev/null: Permission denied
Im using opensuse 12.3 on the host and guest. The gues and the host is a fresh lxc container. the lxc version is: host# rpm -q lxc lxc-0.8.0-3.5.1.x86_64 -> this is the version from opensuse 12.3 the 'guest' systemd processes are ... guest# ps -eaf | grep systemd root 24 1 0 19:48 ? 00:00:00 /usr/lib/systemd/systemd-logind message+ 28 1 0 19:48 ? 00:00:00 /bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation root 955 1 0 19:48 ? 00:00:00 /usr/lib/systemd/systemd-journald the 'host' systemd processes are ... host# ps -eaf | grep systemd root 307 1 0 20:04 ? 00:00:00 /usr/lib/systemd/systemd-journald root 331 1 0 20:04 ? 00:00:00 /usr/lib/systemd/systemd-udevd root 525 1 0 20:04 ? 00:00:00 /usr/lib/systemd/systemd-logind message+ 567 1 0 20:04 ? 00:00:00 /bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation root 16813 16684 0 21:48 ? 00:00:00 /usr/lib/systemd/systemd-logind usbmux 16817 16684 0 21:48 ? 00:00:00 /bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation root 17755 16684 0 21:48 ? 00:00:00 /usr/lib/systemd/systemd-journald the guest pstree is ... guest# pstree -a systemd ├─agetty --noclear console 38400 linux ├─agetty --noclear tty1 38400 linux ├─agetty --noclear tty4 38400 linux ├─agetty --noclear tty2 38400 linux ├─agetty --noclear tty3 38400 linux ├─agetty --noclear -s console 115200 38400 9600 ├─dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation ├─dhcpcd --netconfig -L -E -c /etc/sysconfig/network/scripts/dhcpcd-hook -t 0 -h nhi2 lxc_nhi2 ├─klogd -c 1 -x ├─rpcbind -w -f ├─rsyncd --daemon --no-detach ├─sshd -D │ └─sshd │ └─bash │ └─pstree -a ├─systemd-journal └─systemd-logind Problem solving steps one solution I try to switch my lxc container on opensuse 12.3 back to sysvinit-init but this seems not to work eigther... # zypper --root /var/lib/lxc/nhi2/rootfs in sysvinit-init Daten des Repositories laden ... Installierte Pakete lesen ... Paketabhängigkeiten auflösen ... Problem: systemd-sysvinit-195-13.18.1.x86_64 steht in Konflikt mit namespace:otherproviders(sbin_init), angeboten von sysvinit-init-2.88+-83.2.1.x86_64 Lösung 1: Folgende Aktionen werden ausgeführt: Deinstallation von systemd-sysvinit-195-13.18.1.x86_64 Deinstallation von aaa_base-12.3-14.8.1.x86_64 Deinstallation von patterns-openSUSE-base-12.3-7.10.1.x86_64 Deinstallation von netcfg-11.5-14.1.1.noarch Deinstallation von ghostscript-fonts-std-9.06-2.1.1.noarch Deinstallation von ghostscript-fonts-other-9.06-2.1.1.noarch Deinstallation von ghostscript-9.06-4.1.1.x86_64 Deinstallation von ghostscript-x11-9.06-4.1.1.x86_64 Lösung 2: sysvinit-init-2.88+-83.2.1.x86_64 nicht installieren Wählen Sie aus den obigen Lösungen mittels Nummer oder brechen Sie a(b). [1/2/b] (b): => I think it is not n good solution to delete aaa_base .-( ################################################################################## as second solution I try to don't use autodev=1 and to create the devices by hand ... but "hand-made" devices together with systemd ... the system immideadly crash -> it seems somthig "eat" alle the memory Reproducible: Always Steps to Reproduce: 1. just install and start a lyx container 2. 3. Actual Results: install be default Expected Results: device permissions are right please assign it to fcrozat@suse.com -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=816456 https://bugzilla.novell.com/show_bug.cgi?id=816456#c Xiaolong Li <xlli@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |xlli@suse.com AssignedTo|bnc-team-screening@forge.pr |fcrozat@suse.com |ovo.novell.com | -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=816456 https://bugzilla.novell.com/show_bug.cgi?id=816456#c1 --- Comment #1 from Frederic Crozat <fcrozat@suse.com> 2013-04-24 12:27:36 UTC --- ok, found the bug, it was missing a fix in LXC, causing incorrect permissions on device nodes. Please test lxc package from http://download.opensuse.org/repositories/home:/fcrozat:/branches:/openSUSE:... (it should be available in a few hours) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=816456 https://bugzilla.novell.com/show_bug.cgi?id=816456#c2 Andreas Otto <aotto1968@t-online.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |aotto1968@t-online.de --- Comment #2 from Andreas Otto <aotto1968@t-online.de> 2013-05-01 17:17:10 UTC --- sorry for the late report -> was away :-) 1. works, -> no errors during login -> screen works 2. > ls -al /dev/ total 4 drwxrwxrwt 7 root root 560 Mai 1 17:11 . drwxr-xr-x 23 root root 4096 Mai 1 17:11 .. crw-rw---- 1 root tty 136, 16 Mai 1 17:11 console lrwxrwxrwx 1 root root 11 Mai 1 17:11 core -> /proc/kcore lrwxrwxrwx 1 root root 13 Mai 1 17:11 fd -> /proc/self/fd crw-rw-rw- 1 root root 1, 7 Mai 1 17:11 full drwxr-xr-x 2 root root 0 Mai 1 17:11 hugepages prw------- 1 root root 0 Mai 1 17:11 initctl lrwxrwxrwx 1 root root 7 Mai 1 17:11 kmsg -> console srw-rw-rw- 1 root root 0 Mai 1 17:11 log drwxrwxrwt 2 root root 40 Mai 1 17:11 mqueue crw-rw-rw- 1 root root 1, 3 Mai 1 17:11 null lrwxrwxrwx 1 root root 13 Mai 1 17:11 ptmx -> /dev/pts/ptmx drwxr-xr-x 2 root root 0 Mai 1 17:11 pts crw-rw-rw- 1 root root 1, 8 Mai 1 17:11 random drwxrwxrwt 2 root root 40 Mai 1 17:11 shm lrwxrwxrwx 1 root root 15 Mai 1 17:11 stderr -> /proc/self/fd/2 lrwxrwxrwx 1 root root 15 Mai 1 17:11 stdin -> /proc/self/fd/0 lrwxrwxrwx 1 root root 15 Mai 1 17:11 stdout -> /proc/self/fd/1 drwxr-xr-x 3 root root 60 Mai 1 17:11 .sysconfig crw-rw-rw- 1 root root 5, 0 Mai 1 17:11 tty crw-rw---- 1 root tty 136, 12 Mai 1 17:11 tty1 crw-rw---- 1 root tty 136, 13 Mai 1 17:11 tty2 crw-rw---- 1 root tty 136, 14 Mai 1 17:11 tty3 crw-rw---- 1 root tty 136, 15 Mai 1 17:11 tty4 lrwxrwxrwx 1 root root 9 Mai 1 17:11 .udev -> /run/udev crw-rw-rw- 1 root root 1, 9 Mai 1 17:11 urandom crw-rw-rw- 1 root root 1, 5 Mai 1 17:11 zero -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=816456 https://bugzilla.novell.com/show_bug.cgi?id=816456#c3 Tony Su <tonysu@su-networking.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |tonysu@su-networking.com --- Comment #3 from Tony Su <tonysu@su-networking.com> 2013-05-03 18:56:19 UTC --- You may need to post lxc-checkconfig If it's related to what I posted here https://forums.opensuse.org/english/get-technical-help-here/install-boot-log... then I think the RH discussion in the link I provided on that page might suggest that there is a current security issue related to enabling non-root Users permission to launch and maybe even access containers. Currently, by using the YAST LXC applet I am able to connect to a running container (likely with root security context). -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=816456 https://bugzilla.novell.com/show_bug.cgi?id=816456#c4 Frederic Crozat <fcrozat@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO InfoProvider| |maintenance@opensuse.org --- Comment #4 from Frederic Crozat <fcrozat@suse.com> 2013-05-22 12:01:53 UTC --- ok, requesting maintenance update with mr#176331 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=816456 https://bugzilla.novell.com/show_bug.cgi?id=816456#c5 --- Comment #5 from Bernhard Wiedemann <bwiedemann@suse.com> 2013-05-22 15:00:14 CEST --- This is an autogenerated message for OBS integration: This bug (816456) was mentioned in https://build.opensuse.org/request/show/176331 Maintenance / -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=816456 https://bugzilla.novell.com/show_bug.cgi?id=816456#c6 Benjamin Brunner <bbrunner@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW InfoProvider|maintenance@opensuse.org | --- Comment #6 from Benjamin Brunner <bbrunner@suse.com> 2013-05-22 15:01:59 CEST --- Hi Frederic, thanks for your submission. I added Jiri Slaby (maintainer of lxc) as reviewer. If it's ok for him I'll start an update. note: Please keep in mind to mention added/changed/deleted patches in the changes-entry. But it's ok for now. I'll add it in the running update. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=816456 https://bugzilla.novell.com/show_bug.cgi?id=816456#c7 Benjamin Brunner <bbrunner@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |FIXED --- Comment #7 from Benjamin Brunner <bbrunner@suse.com> 2013-06-03 04:59:08 CEST --- Update released for openSUSE 12.3. Resolved fixed. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=816456 https://bugzilla.novell.com/show_bug.cgi?id=816456#c8 --- Comment #8 from Swamp Workflow Management <swamp@suse.de> 2013-06-10 10:30:32 UTC --- openSUSE-RU-2013:0988-1: An update that has one recommended fix can now be installed. Category: recommended (low) Bug References: 816456 CVE References: Sources used: openSUSE 12.3 (src): lxc-0.8.0-3.13.1 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@novell.com