Date: Sun, 21 Feb 2016 13:36:31 +0200 From: Johannes Jost Meixner <johannes@meixner.dk> To: =?UTF-8?B?RGFnLUVybGluZyBTbcO4cmdyYXY=?= <des@des.no>, =?UTF-8?B?UmVu?= =?UTF-8?B?w6kgTGFkYW4=?= <rene@freebsd.org> Cc: emulation@freebsd.org Subject: Re: CVE-2015-7547 and linux-f10-* ports? Message-ID: <56C9A13F.7080301@meixner.dk> In-Reply-To: <86mvqxlvr3.fsf@desk.des.no> References: <CADL2u4gFJEz1APFeoDJ=xO-ze3%2BaZAWvJqqy1G3WZfD4OHg5uQ@mail.gmail.com> <86mvqxlvr3.fsf@desk.des.no>
next in thread | previous in thread | raw e-mail | index | archive | help
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
linux-c6 confirmed working on 9.3-RELEASE.
You do need to change one sysctl, as is indicated in the linux_base-c6
pkgmessage.
- ---
root@93test:~ # uname -a
FreeBSD 93test 9.3-RELEASE FreeBSD 9.3-RELEASE #0 r268512: Thu Jul 10
23:44:39 UTC 2014
root@snap.freebsd.org:/usr/obj/usr/src/sys/GENERIC amd64
root@93test:~ # pkg install linux-c6
Updating FreeBSD repository catalogue...
FreeBSD repository is up-to-date.
All repositories are up-to-date.
pkg: linux-c6 has a missing dependency: linux-c6-flashplugin
Checking integrity... done (0 conflicting)
The following 6 package(s) will be affected (of 0 checked):
New packages to be INSTALLED:
linux-c6: 0.5
linux-c6-libsndfile: 1.0.20_2
linux-c6-flac: 1.2.1_3
linux_base-c6: 6.7_1
linux-c6-libogg: 1.1.4_2
linux-c6-libvorbis: 1.2.3_2
The process will require 172 MiB more space.
Proceed with this action? [y/N]: ^C
root@93test:~ #
root@93test:~ # pkg install --quiet linux-c6
pkg: linux-c6 has a missing dependency: linux-c6-flashplugin
root@93test:~ # pkg install --quiet -y linux-c6
pkg: linux-c6 has a missing dependency: linux-c6-flashplugin
compat.linux.osrelease: 2.6.16 is not supported, exiting
pkg: PRE-INSTALL script failed
+++ Some programs may need linprocfs, please add it to /etc/fstab! +++
Running linux ldconfig...
FATAL: kernel too old
Segmentation fault (core dumped)
FATAL: kernel too old
FATAL: kernel too old
FATAL: kernel too old
FATAL: kernel too old
Message from linux_base-c6-6.7_1:
This software is based in part on the work of the FreeType Team.
See <URL:http://www.freetype.org/>.
Installation of the Linux base system is finished. The Linux kernel
mode, which must be enabled for Linux binaries to run, is now
enabled. Linux mode can be enabled permanently with the linux_enable
variable of rc.conf(5).
- ----------------------
You should enable Linux mode with the linux_enable variable of rc.conf(5
).
Depending on the version of FreeBSD you are using you may have to increa
se
the emulated linux version via compat.linux.osrelease=2.6.18 in
sysctl.conf(5). Check via "sysctl compat.linux.osrelease" that it shows
a
lower version number before setting it.
- ----------------------
< snip >
WARNING: doing work which needs to chroot into the linux base may not
work.
In such cases (e.g. cross-development) you are better suited with a
linux_dist
port.
root@93test:~ # chroot /compat/linux /bin/bash
FATAL: kernel too old
root@93test:~ # sysctl compat.linux.osrelease=2.6.18
compat.linux.osrelease: 2.6.16 -> 2.6.18
root@93test:~ # chroot /compat/linux /bin/bash
bash-4.1# ls -la /usr/bin/
total 6806K
drwxr-xr-x 2 0 0 203 Feb 21 11:24 .
drwxr-xr-x 12 0 0 13 Feb 21 11:24 ..
- -rwxr-xr-x 1 0 0 34716 Feb 18 12:10 [
<snip>
On 02/18/16 08:27 PM, Dag-Erling Smørgrav wrote:
> René Ladan <rene@freebsd.org> writes:
>> in light of CVE-2015-7547 and various other security
>> vulnerabilities, is there any desire to keep the linux-f10-*
>> ports?
>
> I don't think we can just svn rm them. IIRC, c6 doesn't work with
> a stock FreeBSD 9 kernel. We would have to issue an EN to update
> the Linuxulator. I'm not sure how much work is involved.
>
> DES
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2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=rlQr
-----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?56C9A13F.7080301>