[opensuse-security] nmbd broken on opensuse 11.4
This analysis is a bit preliminary so I may be wrong, but I think the latest Samba update has broken nmbd on opensuse 11.4. I am getting the same symptoms as reported for 12.1 on https://bugzilla.novell.com/show_bug.cgi?id=734677 Will continue investigating, but i wanted to warn people to take care. Bob Vickers -- To unsubscribe, e-mail: opensuse-security+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-security+owner@opensuse.org
I have done some more checking, and it very much looks like the Samba patch broke nmbd. nmbd failed this morning immediately after zypper restarted it. The message is: [2012/04/17 10:26:53, 0] lib/util_sock.c:1369(create_pipe_sock) bind failed on pipe socket /var/lib/samba/unexpected: Permission denied It can be fixed by applying the following lines to /etc/apparmor.d/usr.sbin.nmbd: /proc/sys/kernel/core_pattern r, /var/{cache,lib}/samba/unexpected rw, and then typing "rcapparmor reload". The packages installed this morning were: samba-3.6.3-112.1 Tue Apr 17 10:26:53 2012 samba-client-3.6.3-112.1 Tue Apr 17 10:26:51 2012 libsmbclient0-32bit-3.6.3-112.1 Tue Apr 17 10:26:49 2012 libldb1-1.0.2-112.1 Tue Apr 17 10:26:49 2012 samba-client-32bit-3.6.3-112.1 Tue Apr 17 10:26:48 2012 samba-32bit-3.6.3-112.1 Tue Apr 17 10:26:48 2012 libtevent0-0.9.11-112.1 Tue Apr 17 10:26:47 2012 libtalloc2-32bit-2.0.5-112.1 Tue Apr 17 10:26:47 2012 libsmbclient0-3.6.3-112.1 Tue Apr 17 10:26:47 2012 libpython2_7-1_0-32bit-2.7-8.12.1 Tue Apr 17 10:26:47 2012 libwbclient0-3.6.3-112.1 Tue Apr 17 10:26:46 2012 libtdb1-32bit-1.2.9-112.1 Tue Apr 17 10:26:46 2012 libtdb1-1.2.9-112.1 Tue Apr 17 10:26:46 2012 libtalloc2-2.0.5-112.1 Tue Apr 17 10:26:46 2012 samba-doc-3.6.3-112.1 Tue Apr 17 10:26:45 2012 libwbclient0-32bit-3.6.3-112.1 Tue Apr 17 10:26:45 2012 Regards, Bob On Tue, 17 Apr 2012, Bob Vickers wrote:
This analysis is a bit preliminary so I may be wrong, but I think the latest Samba update has broken nmbd on opensuse 11.4. I am getting the same symptoms as reported for 12.1 on https://bugzilla.novell.com/show_bug.cgi?id=734677
Will continue investigating, but i wanted to warn people to take care.
Bob Vickers -- To unsubscribe, e-mail: opensuse-security+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-security+owner@opensuse.org
<<
Email has been scanned for viruses by Altman Technologies' email management service - www.altman.co.uk/emailsystems
============================================================== Bob Vickers R.Vickers@cs.rhul.ac.uk Dept of Computer Science, Royal Holloway, University of London WWW: http://www.cs.rhul.ac.uk/home/bobv Phone: +44 1784 443691 -- To unsubscribe, e-mail: opensuse-security+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-security+owner@opensuse.org
Thank you, Bob. Your fix did work for me and my "broken" openSUSE 11.4 Samba servers. Greetings, Carsten On Tue, 17 Apr 2012 16:05:42 +0100 (BST) Bob Vickers <R.Vickers@cs.rhul.ac.uk> wrote:
I have done some more checking, and it very much looks like the Samba patch broke nmbd. nmbd failed this morning immediately after zypper restarted it. The message is:
[2012/04/17 10:26:53, 0] lib/util_sock.c:1369(create_pipe_sock) bind failed on pipe socket /var/lib/samba/unexpected: Permission denied
It can be fixed by applying the following lines to /etc/apparmor.d/usr.sbin.nmbd:
/proc/sys/kernel/core_pattern r, /var/{cache,lib}/samba/unexpected rw,
and then typing "rcapparmor reload".
The packages installed this morning were: samba-3.6.3-112.1 Tue Apr 17 10:26:53 2012 samba-client-3.6.3-112.1 Tue Apr 17 10:26:51 2012 libsmbclient0-32bit-3.6.3-112.1 Tue Apr 17 10:26:49 2012 libldb1-1.0.2-112.1 Tue Apr 17 10:26:49 2012 samba-client-32bit-3.6.3-112.1 Tue Apr 17 10:26:48 2012 samba-32bit-3.6.3-112.1 Tue Apr 17 10:26:48 2012 libtevent0-0.9.11-112.1 Tue Apr 17 10:26:47 2012 libtalloc2-32bit-2.0.5-112.1 Tue Apr 17 10:26:47 2012 libsmbclient0-3.6.3-112.1 Tue Apr 17 10:26:47 2012 libpython2_7-1_0-32bit-2.7-8.12.1 Tue Apr 17 10:26:47 2012 libwbclient0-3.6.3-112.1 Tue Apr 17 10:26:46 2012 libtdb1-32bit-1.2.9-112.1 Tue Apr 17 10:26:46 2012 libtdb1-1.2.9-112.1 Tue Apr 17 10:26:46 2012 libtalloc2-2.0.5-112.1 Tue Apr 17 10:26:46 2012 samba-doc-3.6.3-112.1 Tue Apr 17 10:26:45 2012 libwbclient0-32bit-3.6.3-112.1 Tue Apr 17 10:26:45 2012
Regards, Bob
On Tue, 17 Apr 2012, Bob Vickers wrote:
This analysis is a bit preliminary so I may be wrong, but I think the latest Samba update has broken nmbd on opensuse 11.4. I am getting the same symptoms as reported for 12.1 on https://bugzilla.novell.com/show_bug.cgi?id=734677
Will continue investigating, but i wanted to warn people to take care.
Bob Vickers -- To unsubscribe, e-mail: opensuse-security+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-security+owner@opensuse.org
<<
Email has been scanned for viruses by Altman Technologies' email management service - www.altman.co.uk/emailsystems
============================================================== Bob Vickers R.Vickers@cs.rhul.ac.uk Dept of Computer Science, Royal Holloway, University of London WWW: http://www.cs.rhul.ac.uk/home/bobv Phone: +44 1784 443691 -- To unsubscribe, e-mail: opensuse-security+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-security+owner@opensuse.org
participants (2)
-
Bob Vickers -
Carsten Ziepke