Bug#329087: Bug#329090: util-vserver: barrier not working, but chroot escape does

2005-10-28 Thread Ola Lundqvist
reassign 329090 kernel-patch-vserver retitle 329090 barrier not working, but chroot escape does on 2.4 kernel tags 329090 + moreinfo merge 329087 329090 thanks Hi With this information I'm now reassigning this to the kernel-patch-vserver package and merging it to the existing bug there. A simple

Bug#329090: util-vserver: barrier not working, but chroot escape does

2005-10-23 Thread Ola Lundqvist
Hello On Sun, Oct 23, 2005 at 02:53:34PM -0700, [EMAIL PROTECTED] wrote: > > No, these issues are not present in 2.6 (using the debian 2.6.8 and the > debian kernel-patch-vserver, both from sarge). I am trying to find out if > this is a kernel problem with the debian 2.4.27 kernel in sarge, or a

Bug#329090: util-vserver: barrier not working, but chroot escape does

2005-10-23 Thread micah
No, these issues are not present in 2.6 (using the debian 2.6.8 and the debian kernel-patch-vserver, both from sarge). I am trying to find out if this is a kernel problem with the debian 2.4.27 kernel in sarge, or a vserver patch problem. micah > Hello > > To me it would be good to know if any o

Bug#329090: util-vserver: barrier not working, but chroot escape does

2005-10-13 Thread Ola Lundqvist
Hello To me it would be good to know if any of these issues are valid if you use 2.6 kernel and patch from sarge? Regards, // Ola On Thu, Oct 13, 2005 at 07:00:27PM +0800, Andrew Lee wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Dear Micah, > > Thank you for your tests, I have

Bug#329090: util-vserver: barrier not working, but chroot escape does

2005-10-13 Thread Ola Lundqvist
Hello On Wed, Oct 12, 2005 at 08:32:56PM -0400, micah wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Hi, > > Ok, I've done a few things. First I've tested and determined a number of > problems with the testfs.sh-0.99 that was being used. Bertl has > incorporated my changes, and fix

Bug#329090: util-vserver: barrier not working, but chroot escape does

2005-10-13 Thread Andrew Lee
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dear Micah, Thank you for your tests, I have downloaded the testfs-0.11.sh and did the similar tests as yours to help confirm the results. > Test #1 > Using all debian sarge componants: > kernel-source: 2.4.27-10 (debian sarge) > util-vserver: 0.30-2

Bug#329090: util-vserver: barrier not working, but chroot escape does

2005-10-12 Thread micah
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, Ok, I've done a few things. First I've tested and determined a number of problems with the testfs.sh-0.99 that was being used. Bertl has incorporated my changes, and fixed a number of others and has made testfs.sh-0.11 which more accurately repres

Bug#329090: util-vserver: barrier not working, but chroot escape does

2005-10-08 Thread Ola Lundqvist
reassign 329090 kernel-patch-vserver thanks Hello Thanks a lot for your testing. Micah could you test with 0.30.208-2 version of util-vserver (from unstable) and a 2.6 kernel to see if you can remove all the problems? See below why I would like you do that. --- I have only tested with ext2 an

Bug#329090: util-vserver: barrier not working, but chroot escape does

2005-10-04 Thread micah
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 These bug reports are very confusing, I am performing my own tests to help clarify. Andrew Lee wrote: > The VCI shouldn't be if you have setup /dev/loop4 correctly, I > did same thing and got same errors when I forgot to setup the /dev/ > loop4 aft

Bug#329090: util-vserver: barrier not working, but chroot escape does

2005-10-03 Thread Ola Lundqvist
Hello On Mon, Oct 03, 2005 at 01:42:36PM +0800, Andrew Lee wrote: > Hi Ola, > > ?b 2005/10/3 ?W?? 3:39 ???AOla Lundqvist ?g???G > > >Now I have run the entire test suite... > > > >zircone:/srv/vservers/labradorit/root# ./testfs.sh -l -t -D /dev/ > >loop4 -M /mnt/t > >Linux-VServer FS Test [V0.0

Bug#329090: util-vserver: barrier not working, but chroot escape does

2005-10-03 Thread Ola Lundqvist
Package: util-vserver Severity: minor Hello On Mon, Oct 03, 2005 at 01:42:36PM +0800, Andrew Lee wrote: > Hi Ola, > > ?b 2005/10/3 ?W?? 3:39 ???AOla Lundqvist ?g???G > > >Now I have run the entire test suite... > > > >zircone:/srv/vservers/labradorit/root# ./testfs.sh -l -t -D /dev/ > >loop4 -

Bug#329090: util-vserver: barrier not working, but chroot escape does

2005-10-03 Thread Ola Lundqvist
Hello On Mon, Oct 03, 2005 at 01:46:44PM +0800, Andrew Lee wrote: > >Hi Ola, > >å¨ 2005/10/3 ä¸å 1:54 æï¼Ola Lundqvist 寫å°ï¼ > >How did you tested and found what kind of security problem? > >I assume you found you couldn't pass the test 109,121 of testfs.sh  > >script,

Bug#329090: util-vserver: barrier not working, but chroot escape does

2005-10-02 Thread Andrew Lee
Hi Ola, 在 2005/10/3 上午 3:39 時,Ola Lundqvist 寫到: Now I have run the entire test suite... zircone:/srv/vservers/labradorit/root# ./testfs.sh -l -t -D /dev/ loop4 -M /mnt/t Linux-VServer FS Test [V0.09] Copyright (C) 2005 H.Poetzl Linux 2.4.27-mppe+ctx+vlan-686-smp i686/0.30.204 VCI: (unkno

Bug#329090: util-vserver: barrier not working, but chroot escape does

2005-10-02 Thread Andrew Lee
Hi Ola,在 2005/10/3 上午 1:54 時,Ola Lundqvist 寫到:How did you tested and found what kind of security problem?I assume you found you couldn't pass the test 109,121 of testfs.sh  script, right? Actually I run the rootesc program and saw that it was possible toescape.I think the rootesc program is only wo

Bug#329090: util-vserver: barrier not working, but chroot escape does

2005-10-02 Thread Ola Lundqvist
Hello On Sun, Oct 02, 2005 at 09:30:02PM +0200, Christian Aichinger wrote: > On Wed, Sep 28, 2005 at 02:47:28PM +0800, Andrew Lee wrote: > > -BEGIN PGP SIGNED MESSAGE- > > Hash: SHA1 > > > > Ola Lundqvist wrote: > > > > >> I do not have access to a 2.6 kernel patched with vserver but I >

Bug#329090: util-vserver: barrier not working, but chroot escape does

2005-10-02 Thread Ola Lundqvist
Hello Now I have run the entire test suite... zircone:/srv/vservers/labradorit/root# ./testfs.sh -l -t -D /dev/loop4 -M /mnt/t Linux-VServer FS Test [V0.09] Copyright (C) 2005 H.Poetzl Linux 2.4.27-mppe+ctx+vlan-686-smp i686/0.30.204 VCI: (unknown) --- testing ext2 filesystem ... [000]* (ext2

Bug#329090: util-vserver: barrier not working, but chroot escape does

2005-10-02 Thread Christian Aichinger
On Wed, Sep 28, 2005 at 02:47:28PM +0800, Andrew Lee wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Ola Lundqvist wrote: > > >> I do not have access to a 2.6 kernel patched with vserver but I > >> can check on a patched 2.4 kernel with old style patch. > > Okay, I have a machine ru

Bug#329090: util-vserver: barrier not working, but chroot escape does

2005-10-02 Thread Ola Lundqvist
Hi Andrew On Mon, Oct 03, 2005 at 12:18:47AM +0800, Andrew Lee wrote: > > ?b 2005/10/2 ?W?? 5:52 ???AOla Lundqvist ?g???G > > >I have now tested on one of my systems and that I have a security > >problem there. > >On the other system (2.4.26 + grsec) the problem do not exist. So > >I'm not >

Bug#329090: util-vserver: barrier not working, but chroot escape does

2005-10-02 Thread Andrew Lee
在 2005/10/2 上午 5:52 時,Ola Lundqvist 寫到: I have now tested on one of my systems and that I have a security problem there. On the other system (2.4.26 + grsec) the problem do not exist. So I'm not sure if I can confim or deny this. How did you tested and found what kind of security problem?

Bug#329090: util-vserver: barrier not working, but chroot escape does

2005-10-01 Thread Ola Lundqvist
Hello On Mon, Sep 19, 2005 at 09:45:10PM +0800, Andrew Lee wrote: > Package: util-vserver > Version: 0.30.204-5sarge2 > Severity: critical > Tags: sarge > Justification: root security hole > > Dear Ola, > > I found the util-vserver in sarge can not pass the test 109 and 121 of > testfs.sh scrip

Bug#329090: util-vserver: barrier not working, but chroot escape does

2005-09-28 Thread Andrew Lee
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ola Lundqvist wrote: >> I do not have access to a 2.6 kernel patched with vserver but I >> can check on a patched 2.4 kernel with old style patch. Okay, I have a machine running 2.6 kernel patched with vserver 2.0, so what can I help you on 2.6 kerne

Bug#329090: util-vserver: barrier not working, but chroot escape does

2005-09-25 Thread Ola Lundqvist
Hello On Mon, Sep 26, 2005 at 01:43:37PM +0800, Andrew Lee wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Ola Lundqvist wrote: > > Is util-vserver from sid necessary for this or is it just the kernel > > patch that is needed to fix it? > > Not sure yet, I have successed passed the

Bug#329090: util-vserver: barrier not working, but chroot escape does

2005-09-25 Thread Andrew Lee
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ola Lundqvist wrote: > Is util-vserver from sid necessary for this or is it just the kernel > patch that is needed to fix it? Not sure yet, I have successed passed the test of testfs.sh script on powerpc with util-vserver from sid(applied the fix02 pa

Bug#329090: util-vserver: barrier not working, but chroot escape does

2005-09-19 Thread Ola Lundqvist
Hello On Mon, Sep 19, 2005 at 09:45:10PM +0800, Andrew Lee wrote: > Package: util-vserver > Version: 0.30.204-5sarge2 > Severity: critical > Tags: sarge > Justification: root security hole > > Dear Ola, > > I found the util-vserver in sarge can not pass the test 109 and 121 of > testfs.sh scrip

Bug#329090: util-vserver: barrier not working, but chroot escape does

2005-09-19 Thread Andrew Lee
Package: util-vserver Version: 0.30.204-5sarge2 Severity: critical Tags: sarge Justification: root security hole Dear Ola, I found the util-vserver in sarge can not pass the test 109 and 121 of testfs.sh script[1] which provide by upstream author. After more tests, upstream author discoveried t