linux-kernel - Re: 6.0.0-RC kernels trigger Firefox snap bug with 6.0.0-rc3 through 6.0.0-rc7

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <6ba15505-1c04-df2b-237f-b3060f26d2e6@leemhuis.info>
Date:   Thu, 6 Oct 2022 18:58:47 +0200
From:   Thorsten Leemhuis <regressions@...mhuis.info>
To:     Mirsad Goran Todorovac <mirsad.todorovac@....unizg.hr>,
        linux-kernel@...r.kernel.org
Cc:     Marc Miltenberger <marcmiltenberger@...il.com>,
        "regressions@...ts.linux.dev" <regressions@...ts.linux.dev>
Subject: Re: 6.0.0-RC kernels trigger Firefox snap bug with 6.0.0-rc3 through
 6.0.0-rc7



On 06.10.22 18:43, Mirsad Goran Todorovac wrote:
> Hey Thorsten,
> 
> On 06. 10. 2022. 15:23, Thorsten Leemhuis wrote:
>> On 06.10.22 14:43, Mirsad Todorovac wrote:
>>> On 10/6/22 14:25, Thorsten Leemhuis wrote:
>>>
>>>> One more question:
>>>>
>>>> On 06.10.22 14:00, Thorsten Leemhuis wrote:
>>>> Were those two vanilla kernels? I asked in #snappy on IRC and was told
>>>> that "snapd simply expects some ubuntu bit in patched into the kernel if
>>>> it detects that it runs on an official ubuntu install...". This was also
>>>> suggested "it probably makes sense to file a but in LP to make the
>>>> kernel team aware".
>>>>
>>> Yes, last time I tried it with git clone from linux_stable on kernel.org
>>> and
>>> config-6.0.0-060000-generic from the official Ubuntu mainline build
>> You don't want to do that. Better take the config used to build a
>> working kernel (say 5.19.y) and then build 6.0 with it (after running
>> "make olddefconfig"), because it might be a new kernel option (say for a
>> new security technique) that might cause the problem, as explained here:
>> https://docs.kernel.org/admin-guide/reporting-regressions.html
> If I understood well, that would mean building www.kernel.org git
> linux_stable
> source with Ubuntu's config-5.9.13-051903?

I meant "please download Linux 6.0 (ideally through git, that you have
everything to perform a bisection), add the config from a working kernel
(if config-5.9.13-051903 is one, yeah, then take that) as .config and
then run "make olddefconfig" before compiling and installing the kernel
to see if 6.0 fails with that config that was working.

Ciao, Thorsten