linux-kernel - Re: if (2.6.24.1 && capset && bind9) bug() --RESOVLED

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <47B1385B.1020908@nrc.co.nz>
Date:	Tue, 12 Feb 2008 19:10:35 +1300
From:	Nick 'Zaf' Clifford <zaf@....co.nz>
To:	serge@...lyn.com
CC:	linux-kernel@...r.kernel.org, SELinux <selinux@...ho.nsa.gov>,
	linux-security-module@...r.kernel.org
Subject: Re: if (2.6.24.1 && capset && bind9) bug() --RESOVLED

serge@...lyn.com wrote:
> Quoting Nick 'Zaf' Clifford (zaf@....co.nz):
>   
>> Please CC me on any/all replies
>>
>> After trying to upgrade to deal with the most recent security issue, I
>>     
>
> Judging by the 2.6.24.2 changelog I don't think the 2.6.24.1 kernel you
> grabbed has the fix you're looking for...
>   
Yes, that I realize now (I'll refer back to the lack of sleep thing
caused by a long, long, long day), and speaking of which....... see below
>> have encountered what has to either be me being very tired, or a kernel
>> bug. After assuming that it was the former for 3 hours, I now conclude
>> I'm more tired, and it has to be the latter.
>>
>>     
> Yeah my first thought was enough has been happening on the capabilities
> front that it could be an unfortunate patch merge, but 2.6.24.1 looks
> ok.  So my next guess would be an selinux change.  Though again i don't
> see anything obvious.  Could you tell us what policy you use, and what
> context bind is starting in?
>   
>

2.6.24.2 seems to fix the issue, so thanks to whoever noticed and fixed
that (and if no one fixed anything, then I'm just a raving loon, and you
can move on with your day, content that the nice man raving about
fictitious bugs is happy again).

But FYI and for what its worth, although SELinux was compiled, it isn't
being used. Its disabled on boot.

Thanks for the reply and help anyways,

Nick


--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/