From owner-freebsd-emulation@freebsd.org Sun Feb 21 11:36:42 2016 Return-Path: Delivered-To: freebsd-emulation@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id C95C1AAFFFA for ; Sun, 21 Feb 2016 11:36:42 +0000 (UTC) (envelope-from johannes@meixner.or.at) Received: from mailman.ysv.freebsd.org (mailman.ysv.freebsd.org [IPv6:2001:1900:2254:206a::50:5]) by mx1.freebsd.org (Postfix) with ESMTP id B808E188C for ; Sun, 21 Feb 2016 11:36:42 +0000 (UTC) (envelope-from johannes@meixner.or.at) Received: by mailman.ysv.freebsd.org (Postfix) id B394BAAFFF9; Sun, 21 Feb 2016 11:36:42 +0000 (UTC) Delivered-To: emulation@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id B3298AAFFF8 for ; Sun, 21 Feb 2016 11:36:42 +0000 (UTC) (envelope-from johannes@meixner.or.at) Received: from dd16522.kasserver.com (dd16522.kasserver.com [85.13.137.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 483AE188B; Sun, 21 Feb 2016 11:36:41 +0000 (UTC) (envelope-from johannes@meixner.or.at) Received: from mx12.chaot.net (249-249-190-90.dyn.estpak.ee [90.190.249.249]) by dd16522.kasserver.com (Postfix) with ESMTPSA id 99995456042; Sun, 21 Feb 2016 12:36:32 +0100 (CET) Received: from mx12.chaot.net (localhost [127.0.0.1]); by mx12.chaot.net (OpenSMTPD) with ESMTP id d7729639; Sun, 21 Feb 2016 13:36:31 +0200 (EET) Message-ID: <56C9A13F.7080301@meixner.dk> Date: Sun, 21 Feb 2016 13:36:31 +0200 From: Johannes Jost Meixner User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:31.0) Gecko/20100101 Thunderbird/31.7.0 MIME-Version: 1.0 To: =?UTF-8?B?RGFnLUVybGluZyBTbcO4cmdyYXY=?= , =?UTF-8?B?UmVu?= =?UTF-8?B?w6kgTGFkYW4=?= CC: emulation@freebsd.org Subject: Re: CVE-2015-7547 and linux-f10-* ports? References: <86mvqxlvr3.fsf@desk.des.no> In-Reply-To: <86mvqxlvr3.fsf@desk.des.no> OpenPGP: id=C18F24928F1D36EA4FA0B2EF496A9D706250D402 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-BeenThere: freebsd-emulation@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: Development of Emulators of other operating systems List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 21 Feb 2016 11:36:42 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 linux-c6 confirmed working on 9.3-RELEASE. You do need to change one sysctl, as is indicated in the linux_base-c6 pkgmessage. - --- root@93test:~ # uname -a FreeBSD 93test 9.3-RELEASE FreeBSD 9.3-RELEASE #0 r268512: Thu Jul 10 23:44:39 UTC 2014 root@snap.freebsd.org:/usr/obj/usr/src/sys/GENERIC amd64 root@93test:~ # pkg install linux-c6 Updating FreeBSD repository catalogue... FreeBSD repository is up-to-date. All repositories are up-to-date. pkg: linux-c6 has a missing dependency: linux-c6-flashplugin Checking integrity... done (0 conflicting) The following 6 package(s) will be affected (of 0 checked): New packages to be INSTALLED: linux-c6: 0.5 linux-c6-libsndfile: 1.0.20_2 linux-c6-flac: 1.2.1_3 linux_base-c6: 6.7_1 linux-c6-libogg: 1.1.4_2 linux-c6-libvorbis: 1.2.3_2 The process will require 172 MiB more space. Proceed with this action? [y/N]: ^C root@93test:~ # root@93test:~ # pkg install --quiet linux-c6 pkg: linux-c6 has a missing dependency: linux-c6-flashplugin root@93test:~ # pkg install --quiet -y linux-c6 pkg: linux-c6 has a missing dependency: linux-c6-flashplugin compat.linux.osrelease: 2.6.16 is not supported, exiting pkg: PRE-INSTALL script failed +++ Some programs may need linprocfs, please add it to /etc/fstab! +++ Running linux ldconfig... FATAL: kernel too old Segmentation fault (core dumped) FATAL: kernel too old FATAL: kernel too old FATAL: kernel too old FATAL: kernel too old Message from linux_base-c6-6.7_1: This software is based in part on the work of the FreeType Team. See . Installation of the Linux base system is finished. The Linux kernel mode, which must be enabled for Linux binaries to run, is now enabled. Linux mode can be enabled permanently with the linux_enable variable of rc.conf(5). - ---------------------- You should enable Linux mode with the linux_enable variable of rc.conf(5 ). Depending on the version of FreeBSD you are using you may have to increa se the emulated linux version via compat.linux.osrelease=2.6.18 in sysctl.conf(5). Check via "sysctl compat.linux.osrelease" that it shows a lower version number before setting it. - ---------------------- < snip > WARNING: doing work which needs to chroot into the linux base may not work. In such cases (e.g. cross-development) you are better suited with a linux_dist port. root@93test:~ # chroot /compat/linux /bin/bash FATAL: kernel too old root@93test:~ # sysctl compat.linux.osrelease=2.6.18 compat.linux.osrelease: 2.6.16 -> 2.6.18 root@93test:~ # chroot /compat/linux /bin/bash bash-4.1# ls -la /usr/bin/ total 6806K drwxr-xr-x 2 0 0 203 Feb 21 11:24 . drwxr-xr-x 12 0 0 13 Feb 21 11:24 .. - -rwxr-xr-x 1 0 0 34716 Feb 18 12:10 [ On 02/18/16 08:27 PM, Dag-Erling Smørgrav wrote: > René Ladan writes: >> in light of CVE-2015-7547 and various other security >> vulnerabilities, is there any desire to keep the linux-f10-* >> ports? > > I don't think we can just svn rm them. IIRC, c6 doesn't work with > a stock FreeBSD 9 kernel. We would have to issue an EN to update > the Linuxulator. I'm not sure how much work is involved. > > DES > -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJWyaE9AAoJEElqnXBiUNQCzwUQAKB3hnhrGDYFDjA1S1PQ2+xC nh9a4V52fiilikjEZbZkD+wiQtrqlG9O58Zg3EDpKWDPOwPTjFd2P7n+1LQX4rU8 07zPkhT5RjAVHHeAgeay7+tgIlV9l2lKfGu4kk8H9+5Xl2PMPQC+F0lVHFBwJf/X A05whZCbOfB27NWgIIPSfb5VA7luVw034N8iPoxLOfOkk5b9ObxhmuUaH47Abi0M GQ7RwqqCOSunIxP/3qTwWQgJ8Y7sVw/KJZSLjDcgoOWyPjevgutQkcerBGDOSU7A tmtS1lw5ZbqiEMCZkqPE0pTwfmumOdUiyGbLMchcn3QfaEnUcCnuy7g5AGRnJmuN Z/Kv8WoOlkes9/NI9g83akRZNttIOo5fRd6h/UQVI1D9Ej3Q2cSmCn7sk1PxBlAw pfqgyzAD43tKIdOUrJf28m998be5gpwU4AgJtiu7VYgOEZRNEx8wAiGLTzKTMzRr XuMkKXG0MqkmbeizlUywUwlSIK8z1Hm8AIppV8t5zaIzRCPzkdAEaWaFxzQ0eSFl U9Fo/jehBHDOUrbNjbcJV0n4rZ2eRGOZXjJcxnbqN5hwXRCcOvCykdz6rmbYByoj KyPWK9LZcwkAa5QI1iu4KfCG1nHfWNPnvgW2iYefDOyYz8wE4qJ8PQYqf//Q4/Er yXyj5cEVsWlb4uxx1Xh+ =rlQr -----END PGP SIGNATURE-----