search for: 3851

1/8 generator: Rearrange argt logically (RHBZ#642934,CVE-2010-3851). 2/8 generator: Optional arguments, add-drive-opts (RHBZ#642934,CVE-2010-3851). These two previously posted. 3/8 fish: Specify format of disks (RHBZ#642934,CVE-2010-3851). Updates to guestfish to add the --format option and to make -d copy the format from libvirt. 4/8 fuse: Specify format of d...

These two patches implement the first (and hardest) part of the fix for CVE-2010-3851. This adds a way to specify the format when adding a drive, avoiding qemu's auto-detection. In order to avoid an explosion of different add_drive_* functions (we have 4 already), we have implemented a way to specify optional arguments to functions, so all we need is a single new 'add_driv...

...tfs may be vulnerable. You should review the bug below carefully to find out if you could be affected, particularly the Description and Comment 1: https://bugzilla.redhat.com/show_bug.cgi?id=643958 A CVE has been allocated to this bug: http://cve.mitre.org/cgi-bin/cvename.cgi?name=+CVE-2010-3851 No fix is available at present, but we are working on one. In the meantime, avoid using libguestfs / tools on: - untrusted, malicious guests that use raw-format storage - where you are running commands from these guests (http://libguestfs.org/guestfs.3.html#running_commands) Rich. -- Ric...

...the equivalent of calling C<add_drive_opts>\nwith no optional parameters, so the disk is added writable, with\nthe format being detected automatically.\n\nAutomatic detection of the format opens you up to a potential\nsecurity hole when dealing with untrusted raw-format images.\nSee CVE-2010-3851 and RHBZ#642934. Specifying the format closes\nthis security hole. Therefore you should think about replacing\ncalls to this function with calls to C<add_drive_opts>,\nand specifying the format."); return 0; } else - if (STRCASEEQ (cmd, "add_cdrom") || STRCASEEQ (...

Version 1.5.23 contains the fix. Fedora 14 users, please test this package and vote it up if it works for you: https://admin.fedoraproject.org/updates/libguestfs-1.5.23-1 Rich. -- Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones New in Fedora 11: Fedora Windows cross-compiler. Compile Windows programs, test, and build Windows installers. Over 70 libraries

On Tue, Mar 14, 2017 at 02:46:19PM -0400, Ron Wheeler wrote: > https://docs.fedoraproject.org/en-US/Fedora/11/html/Security-Enhanced_Linux/sect-Security-Enhanced_Linux-Working_with_SELinux-Enabling_and_Disabling_SELinux.html > > If disabling Selinux solves your problem, then your problem may be related > to Selinux. > If it does not change yout problem, you may want to look

...85 pid=3844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="asterisk" exe="/usr/sbin/asterisk" subj=system_u:system_r:asterisk_t:s0 key=(null) > type=AVC msg=audit(1489588781.629:1176): avc: denied { getattr } for pid=3851 comm="asterisk" path="/var/lib/asterisk/astdb.sqlite3" dev="dm-0" ino=100884225 scontext=system_u:system_r:asterisk_t:s0 tcontext=unconfined_u:object_r:var_lib_t:s0 tclass=file > type=SYSCALL msg=audit(1489588781.629:1176): arch=c000003e syscall=4 success=no exit=-1...

Dear R People: I have a data frame with the two following date columns: > a.df[1:10,c(1,6)] DATE DEATH 1207 2009-04-16 2009-05-06 1514 2009-04-16 2009-05-06 2548 2009-04-16 2009-05-08 3430 2009-04-16 2009-05-09 3851 2009-04-16 2009-05-09 3945 2009-04-16 2009-05-09 7274 2009-04-16 2009-05-12 7532 2009-04-16 2009-05-12 7651 2009-04-16 2009-05-12 8495 2009-04-16 2009-05-13 > I would like to generate a 3rd column which is the difference in days between the two dates. I tried a.df$DEATH - a.df$DATE but I obt...

...953546e..83f500fde 100644 --- a/align/virt-alignment-scan.pod +++ b/align/virt-alignment-scan.pod @@ -162,6 +162,8 @@ If you have untrusted raw-format guest disk images, you should use this option to specify the disk format. This avoids a possible security problem with malicious guests (CVE-2010-3851). +__INCLUDE:blocksize-option.pod__ + =item B<-P> nr_threads Since libguestfs 1.22, virt-alignment-scan is multithreaded and diff --git a/cat/Makefile.am b/cat/Makefile.am index 1d013e8dd..01e13abda 100644 --- a/cat/Makefile.am +++ b/cat/Makefile.am @@ -200,6 +200,7 @@ stamp-virt-filesy...

From: Nikolay Ivanets <stenavin@gmail.com> This patch depends on changes in 'common' sub-module posted here: https://www.redhat.com/archives/libguestfs/2020-February/msg00099.html v2: Almost the same as v1 except '--blocksize' option description is moved into a common submodule (similar to key-option.pod). v1 was here:

...53546e..21b5339e0 100644 --- a/align/virt-alignment-scan.pod +++ b/align/virt-alignment-scan.pod @@ -162,6 +162,18 @@ If you have untrusted raw-format guest disk images, you should use this option to specify the disk format. This avoids a possible security problem with malicious guests (CVE-2010-3851). +=item B<--blocksize=512> + +=item B<--blocksize=4096> + +=item B<--blocksize> + +This parameter sets the sector size of the disk image. Similar to +I<--format> option it affects all subsequent I<-a> options. Using +I<--blocksize> with no argument switches...

From: Nikolay Ivanets <stenavin@gmail.com> This patch depends on changes in 'common' sub-module posted here: https://www.redhat.com/archives/libguestfs/2020-February/msg00096.html Nikolay Ivanets (1): tools: add '--blocksize' option for C-based tools align/scan.c | 8 ++++++++ align/virt-alignment-scan.pod | 12 ++++++++++++ cat/cat.c

...idmap config INT : default = yes idmap config INT : backend = ad idmap config * : backend = ad idmap config * : schema_mode = rfc2307 idmap config * : range = 10000 - 300000000 admin users = int\administrators Winbind Trace output: accepted socket 24 [ 3851]: request interface version [ 3851]: request location of privileged pipe accepted socket 27 closing socket 24, client exited [ 3851]: getgrent child daemon request 59 Finished processing child request 59 child daemon request 59 Current tickets expire in 35986 seconds (at 1368130999, time is now 136...

v1 was here: https://www.redhat.com/archives/libguestfs/2019-November/msg00271.html In v2 I just updated the way paths are handled. Note this series requires the following patch to common which adds the common/options/key-option.pod file: https://www.redhat.com/archives/libguestfs/2019-November/msg00269.html Rich.

The libguestfs part of this change. Also a virt-v2v part will be needed. The first patch adds a new feature to podwrapper so that we can use __INCLUDE:file__ directives within the POD itself (instead of using --insert, and one day replacing that). The second patch shows how this change could be used for the included parts of the guestfish man page, including the non-English pages under

Dear R People: Here is a little section of a data frame: > zzz[1:10,] DATE GENDER AGE Co DEATH1 3945 2009-04-16 M 24 Botulinic 23 3851 2009-04-16 M 35 Constitutional 23 8495 2009-04-16 F 49 Constitutional 27 10967 2009-04-16 F 47 Constitutional 28 11164 2009-04-16 F 26 Constitutional 28 15220 2009-04-16 M 49 Gastrointestinal 30 1207 2009-04-16 F 39 Other...

...see what you are typing. + =item B<--format> raw|qcow2|.. =item B<--format> auto @@ -131,6 +138,11 @@ If you have untrusted raw-format guest disk images, you should use this option to specify the disk format. This avoids a possible security problem with malicious guests (CVE-2010-3851). +=item B<--keys-from-stdin> + +Read key or passphrase parameters from stdin. The default is +to try to read passphrases from the user by opening F</dev/tty>. + =item B<-m> MB =item B<--memsize> MB diff --git a/get-kernel/get_kernel.ml b/get-kernel/get_kernel.ml inde...

...indice de variaci?n ?Hay alguna forma de rebuscar en dentro de > > biovars para saber que est? haciendo? > > > > Muchas gracias. -- -- Jorge Virto Moreno Dpt. Economia Aplicada III Facultad de Econom?a y Empresa UPV-EHU Avda. Lehendakari Agirre, 83 48015 Bilbao Spain Tel: 94 601 3851 Fax: 94 601 3754 eman ta zabal zazu _ _ | \___ |___\-\_ | ___] __ | | | [_ __ [_ |_| | |__ _] [_ |___] / | [_ | ______/ |___ \__| | | |...

...dmap_tdb.c:db_idmap_init(319) idmap uid range missing or invalid idmap will be unable to map foreign SIDs [2003/07/07 10:37:36, 1] sam/idmap_tdb.c:db_idmap_init(331) idmap gid range missing or invalid idmap will be unable to map foreign SIDs [2003/07/07 10:37:36, 3] param/loadparm.c:lp_load(3851) lp_load: refreshing parameters [2003/07/07 10:37:36, 3] param/loadparm.c:init_globals(1274) Initialising global parameters [2003/07/07 10:37:36, 3] param/params.c:pm_process(566) params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf" [2003/07/07 10:37:36, 3] pa...

...PU: 1 EIP: 0010:[<c0165908>] Not tainted Using defaults from ksymoops -t elf32-i386 -a i386 EFLAGS: 00010292 eax: 0000006c ebx: c416d4e0 ecx: 00000086 edx: f7771f64 esi: d11cc000 edi: e9bd6be0 ebp: ca735600 esp: d11cdb28 ds: 0018 es: 0018 ss: 0018 Process ipop3d (pid: 3851, stackpage=d11cd000) Stack: c029c740 c02983d3 c0298b01 000000e2 c029e680 c416d4e0 c416d4e0 ffffffe2 e9bd6be0 dd023ca0 c016080e ca735600 00000001 d11cdc48 00000002 00000128 d11cdb78 e9bd6be0 d43e7e00 00000001 c014b58e e9bd6be0 00000004 e9bd6be0 Call Trace: [<c016080e>] [<c0...