Re: Can't link to OpenSSL on my laptop

2018-06-26 Thread Guillaume Clercin
Le mardi 26 juin 2018, 17:16:59 CEST Charlie Gibbs a écrit :
> I've written a software suite using openssl-1.1.0f and libssh2-1.8.0.
> On my main development box, everything compiles fine, but on my laptop
> it can't find the OpenSSL library.  Here's my console output:
> 
> cc -c revdate.c
> cc -O -DLINUX -lgtk-3 -lgdk-3 -lpangocairo-1.0 -lpango-1.0 -latk-1.0
> -lcairo-gobject -lcairo -lgdk_pixbuf-2.0 -lgio-2.0 -lgobject-2.0
> -lglib-2.0   -o linux/GenStart GenStart.c revdate.o linuxo/genesis.a
> -lcurses -lssh2 -lssl -lcrypto
> linuxo/genesis.a(gensock.o): In function `socksslstart':
> gensock.c:(.text+0x1c9): undefined reference to `OPENSSL_init_ssl'
> gensock.c:(.text+0x1d8): undefined reference to `OPENSSL_init_ssl'
> gensock.c:(.text+0x1e6): undefined reference to `TLS_server_method'
> gensock.c:(.text+0x3f1): undefined reference to `TLS_client_method'
> /usr/bin/ld: linuxo/genesis.a(gensock.o): unrecognized relocation (0x2a)
> in section `.text'
> /usr/bin/ld: final link failed: Bad value
> collect2: error: ld returned 1 exit status
> make: *** [linux/GenStart] Error 1
> makefile.lnx:376: recipe for target 'linux/GenStart' failed
> 
> I'm running Stretch on the desktop box; "cat /etc/debian_version"
> returns "9.2".  The failing laptop is still running a patched version of
> Jessie; "cat /etc/debian_version" returns "jessie/sid".  Both are 64-bit
> systems.
> 
> Do I need to upgrade my laptop?
According to the man page, these functions has been introduced in version 1.1 
of OpenSSL (only available in stretch and no jessie-backports). So I think 
it's time to upgrade.


-- 
Guillaume Clercin
Intellique
www.intellique.com
Tél: 01 78 94 84 06

signature.asc
Description: This is a digitally signed message part.


Re: Kernel upgrade = freeze on boot (linux-image-4.16.0-2-amd64)

2018-07-02 Thread Guillaume Clercin
Le lundi 2 juillet 2018, 01:06:10 CEST Carl Fink a écrit :
> So, on a Testing system, linux-image-4.16.0-2-amd64 came up in the apt
> 
> queue. I installed it and rebooted.
> My system froze on reboot. Scrolled through the boot messages on the
> console, up to X starting, then this (warning, long excerpt from syslog):
> ...
> Jul 1 18:50:09 debian-nitpicking kernel: [ 7.399065] usercopy: Kernel
> memory exposure attempt detected from SLUB object 'nvidia_stack_cache'
> (offset 11440, size 3)!
> ...
You need to update "/etc/default/grub" and add parameter to boot with. In this 
file, you need to edit the line starting with GRUB_CMDLINE_LINUX and append 
option: "slab_common.usercopy_fallback=y". This workaround was suggested by 
nvidia maintainer. Don't forget to run "update-grub" after.

nvidia-graphics-drivers (390.67-1) unstable; urgency=medium

  For using the NVIDIA driver on Linux 4.16.16-1 or newer, the following
  kernel boot option may be needed as a workaround for #901919:
slab_common.usercopy_fallback=y
  See https://bugs.debian.org/901919 for details.

 -- Andreas Beckmann   Thu, 28 Jun 2018 12:32:19 +0200

This workaround works fine for me. Currently, I'm using nvidia-driver 
(390.67-1) and Linux (4.16.0-2-amd64).

Guillaume Clercin

signature.asc
Description: This is a digitally signed message part.


Re: Kernel upgrade = freeze on boot (linux-image-4.16.0-2-amd64)

2018-07-05 Thread Guillaume Clercin
Le jeudi 5 juillet 2018, 08:25:15 CEST Ric Moore a écrit :
> On 07/04/2018 09:12 PM, Carl Fink wrote:
> > On 07/02/2018 04:49 AM, Guillaume Clercin wrote:
> >> You need to update "/etc/default/grub" and add parameter to boot with.
> >> In this
> >> file, you need to edit the line starting with GRUB_CMDLINE_LINUX and
> >> append
> >> option: "slab_common.usercopy_fallback=y". This workaround was
> >> suggested by
> >> nvidia maintainer. Don't forget to run "update-grub" after.
> >> 
> >> nvidia-graphics-drivers (390.67-1) unstable; urgency=medium
> >> 
> >>For using the NVIDIA driver on Linux 4.16.16-1 or newer, the following
> >>kernel boot option may be needed as a workaround for #901919:
> >>  slab_common.usercopy_fallback=y
> >>See https://bugs.debian.org/901919 for details.
> >> 
> >>   -- Andreas Beckmann   Thu, 28 Jun 2018 12:32:19 +0200
> >> 
> >> This workaround works fine for me. Currently, I'm using nvidia-driver
> >> (390.67-1) and Linux (4.16.0-2-amd64).
> > 
> > I am late in saying it, but thank you, Guillaume.
> > 
> > This also worked for me.
> 
> Worked for me too!! THANKS!!! Ric

I upgrade nvidia-driver to version 390.67-2 and I can boot without option  
"slab_common.usercopy_fallback".


nvidia-graphics-drivers (390.67-2) unstable; urgency=high

  * Add kmem_cache_create_usercopy.patch from Red Hat, fixing "Bad or missing
usercopy whitelist? Kernel memory exposure attempt detected from SLUB
object 'nvidia_stack_cache'" on Linux kernels that have disabled
CONFIG_HARDENED_USERCOPY_FALLBACK (i.e. linux-image-4.16.0-2-* or newer).
(Closes: #901919)

 -- Andreas Beckmann   Thu, 05 Jul 2018 02:01:31 +0200


-- 
Guillaume Clercin

signature.asc
Description: This is a digitally signed message part.