search for: libseccomp

https://bugzilla.mindrot.org/show_bug.cgi?id=2142 Bug ID: 2142 Summary: openssh sandboxing using libseccomp Product: Portable OpenSSH Version: -current Hardware: All OS: Linux Status: NEW Severity: enhancement Priority: P5 Component: sshd Assignee: unassigned-bugs at mindrot.org Reporter: loganade...

...mulate these errors by using a small Linux seccomp program to prohibit chgrp/chown syscalls. 1. Login to a linux account that belongs to at least 2 groups. $ id uid=1000(mvitale) gid=1000(mvitale) groups=1000(mvitale),10(wheel) 2. Build a program to simulate chown/chgrp errors: $ sudo yum install libseccomp libseccomp-devel $ cc -lseccmp seccomp-chown.c -o sec-kill-chown The source code for seccomp-chown.c is attached to this ticket. 3. Create a large source directory with over 10000 files. $ git clone git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git These files will all have the...

...installed --> Processing Dependency: grub2-ppc64-modules = 1:2.02-0.64.el7.centos for package: 1:grub2-ppc64-2.02-0.64.el7.centos.ppc64 ---> Package gtk-update-icon-cache.ppc64 0:3.22.10-4.el7 will be installed ---> Package libfastjson.ppc64 0:0.99.4-2.el7 will be installed ---> Package libseccomp.ppc64 0:2.3.1-3.el7 will be installed ---> Package nss-pem.ppc64 0:1.0.3-4.el7 will be installed ---> Package python-linux-procfs.noarch 0:0.4.9-3.el7 will be installed ---> Package python-schedutils.ppc64 0:0.4-6.el7 will be installed ---> Package stix-fonts.noarch 0:1.1.0-5.el7 will b...

https://bugzilla.mindrot.org/show_bug.cgi?id=2361 Bug ID: 2361 Summary: seccomp filter (not only) for aarch64 Product: Portable OpenSSH Version: 6.7p1 Hardware: Other OS: Linux Status: NEW Severity: enhancement Priority: P5 Component: sshd Assignee: unassigned-bugs at

...-ppc64-modules = >> 1:2.02-0.64.el7.centos for package: >> 1:grub2-ppc64-2.02-0.64.el7.centos.ppc64 >> ---> Package gtk-update-icon-cache.ppc64 0:3.22.10-4.el7 will be installed >> ---> Package libfastjson.ppc64 0:0.99.4-2.el7 will be installed >> ---> Package libseccomp.ppc64 0:2.3.1-3.el7 will be installed >> ---> Package nss-pem.ppc64 0:1.0.3-4.el7 will be installed >> ---> Package python-linux-procfs.noarch 0:0.4.9-3.el7 will be installed >> ---> Package python-schedutils.ppc64 0:0.4-6.el7 will be installed >> ---> Package st...

Thank for your answer: But i dont know understand why is following not working: I want to restrict the ssh access for a special domain member: In my "sshd_config" i added: AllowGroups restrictaccess root With user2 im able to login via ssh! log: pam_krb5(sshd:auth): user user2 authenticated as user2 at ROOTRUDI.DE With user1 im not! log: User user1 from 192.168.0.100 not allowed

On Sat, Dec 02, 2023 at 10:24:57PM +0300, Vitaly Chikunov wrote: > JFYI. I am not sure it's worth reporting but, when building 2.5.5 for ALT Talking of small inconsistencies, 2.5.5 isn't a Xapian version... > I noticed small inconsistencies in configure output. > > 1. xapian-binding: > > checking for /usr/bin/rdoc... no > checking for rdoc... /usr/bin/rdoc >

...e000) libxenstore.so.3.0 => /usr/lib/x86_64-linux-gnu/libxenstore.so.3.0 (0x00007f08012d3000) libxenctrl-4.4.so => /usr/lib/x86_64-linux-gnu/libxenctrl-4.4.so (0x00007f08010ab000) libxenguest-4.4.so => /usr/lib/x86_64-linux-gnu/libxenguest-4.4.so (0x00007f0800e80000) libseccomp.so.2 => /usr/lib/x86_64-linux-gnu/libseccomp.so.2 (0x00007f0800c69000) libfdt.so.1 => /usr/lib/x86_64-linux-gnu/libfdt.so.1 (0x00007f0800a62000) libspice-server.so.1 => /usr/lib/x86_64-linux-gnu/libspice-server.so.1 (0x00007f0800737000) libusb-1.0.so.0 => /lib/x86_64-l...

...ng Dependency: grub2-ppc64-modules = > 1:2.02-0.64.el7.centos for package: > 1:grub2-ppc64-2.02-0.64.el7.centos.ppc64 > ---> Package gtk-update-icon-cache.ppc64 0:3.22.10-4.el7 will be installed > ---> Package libfastjson.ppc64 0:0.99.4-2.el7 will be installed > ---> Package libseccomp.ppc64 0:2.3.1-3.el7 will be installed > ---> Package nss-pem.ppc64 0:1.0.3-4.el7 will be installed > ---> Package python-linux-procfs.noarch 0:0.4.9-3.el7 will be installed > ---> Package python-schedutils.ppc64 0:0.4-6.el7 will be installed > ---> Package stix-fonts.noarch...

...ng Dependency: grub2-ppc64-modules = > 1:2.02-0.64.el7.centos for package: > 1:grub2-ppc64-2.02-0.64.el7.centos.ppc64 > ---> Package gtk-update-icon-cache.ppc64 0:3.22.10-4.el7 will be installed > ---> Package libfastjson.ppc64 0:0.99.4-2.el7 will be installed > ---> Package libseccomp.ppc64 0:2.3.1-3.el7 will be installed > ---> Package nss-pem.ppc64 0:1.0.3-4.el7 will be installed > ---> Package python-linux-procfs.noarch 0:0.4.9-3.el7 will be installed > ---> Package python-schedutils.ppc64 0:0.4-6.el7 will be installed > ---> Package stix-fonts.noarch...

...;>> 1:2.02-0.64.el7.centos for package: >>> 1:grub2-ppc64-2.02-0.64.el7.centos.ppc64 >>> ---> Package gtk-update-icon-cache.ppc64 0:3.22.10-4.el7 will be installed >>> ---> Package libfastjson.ppc64 0:0.99.4-2.el7 will be installed >>> ---> Package libseccomp.ppc64 0:2.3.1-3.el7 will be installed >>> ---> Package nss-pem.ppc64 0:1.0.3-4.el7 will be installed >>> ---> Package python-linux-procfs.noarch 0:0.4.9-3.el7 will be installed >>> ---> Package python-schedutils.ppc64 0:0.4-6.el7 will be installed >>> --...

Package: xen-hypervisor-4.5-amd64_4.5.0-1_amd64.deb Version: 4.5.0-1 Hi, I use xen with sdl, not with vnc. When I boot on xen-hypervisor-4.4-amd64, everything is fine. With Debian or Windows 8.1 I have a good display, But when I choose at boot, the xen-hypervisor-4.5-amd64, things go wrong. If I launch a xen Debian, I get some blur effect on the display. And when I launch a xen Windows8.1,

...vm 13468 qemu mem REG 253,0 80096 101153158 /usr/lib64/libibverbs.so.1.0.0 qemu-kvm 13468 qemu mem REG 253,0 92032 101153164 /usr/lib64/librdmacm.so.1.0.0 qemu-kvm 13468 qemu mem REG 253,0 266680 100984135 /usr/lib64/libseccomp.so.2.3.1 qemu-kvm 13468 qemu mem REG 253,0 23800 100826840 /usr/lib64/libsnappy.so.1.1.4 qemu-kvm 13468 qemu mem REG 253,0 135112 100702462 /usr/lib64/liblzo2.so.2.0.0 qemu-kvm 13468 qemu mem REG 253,0 1292416 10102798...

https://bugzilla.mindrot.org/show_bug.cgi?id=2647 Bug ID: 2647 Summary: Tracking bug for OpenSSH 7.5 release Product: Portable OpenSSH Version: -current Hardware: Other OS: Linux Status: NEW Keywords: meta Severity: enhancement Priority: P5 Component: Miscellaneous

See this bug for background information: https://bugzilla.redhat.com/show_bug.cgi?id=1350465 Thanks: Tomáš Golembiovský --- v2v/virt-v2v.pod | 38 ++++++++++++++++++++++++++------------ 1 file changed, 26 insertions(+), 12 deletions(-) diff --git a/v2v/virt-v2v.pod b/v2v/virt-v2v.pod index e68d75cf8..0943bf305 100644 --- a/v2v/virt-v2v.pod +++ b/v2v/virt-v2v.pod @@ -1909,18 +1909,32 @@ that

See this bug for background information: https://bugzilla.redhat.com/show_bug.cgi?id=1350465 --- v2v/virt-v2v.pod | 39 +++++++++++++++++++++++++++------------ 1 file changed, 27 insertions(+), 12 deletions(-) diff --git a/v2v/virt-v2v.pod b/v2v/virt-v2v.pod index e68d75cf8..93d1a9ecd 100644 --- a/v2v/virt-v2v.pod +++ b/v2v/virt-v2v.pod @@ -1909,18 +1909,33 @@ that guest through the RHV-M UI,

If the connection is not local, paths of disks will refer to the remote host, which were mistakenly handled as local paths (in the best case failing to open a non-existing disk, and in the worst case opening a different disk!). In case the disks are remote resources like ssh or ceph, nothing guarantees that the hostname can be reached from the local machine, or even that it is actually the same on

Hopefully this time ...