--caOsQBL6huKbQJnXFMbuWHMkoTNEXvcGc
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
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=g2JX
-----END PGP SIGNATURE-----

--caOsQBL6huKbQJnXFMbuWHMkoTNEXvcGc--
=========================================================================
Date:         Tue, 25 Oct 2016 05:40:15 -0700
Reply-To:     Akemi Yagi <[log in to unmask]>
Sender:       Mailing list for Scientific Linux developers worldwide
              <[log in to unmask]>
From:         Akemi Yagi <[log in to unmask]>
Subject:      Re: Cowroot vulnerability
Comments: To: Valentin B <[log in to unmask]>
In-Reply-To:  <[log in to unmask]>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="001a11c16282aaefb3053fafd09c"
Message-ID:  <[log in to unmask]>

--001a11c16282aaefb3053fafd09c
Content-Type: text/plain; charset="UTF-8"

On Tue, Oct 25, 2016 at 12:48 AM, Valentin B <[log in to unmask]> wrote:
> Hi Akemi,
>
> The fix allows me to run the cow vulnerability but it blocks which is good.
>
> See the following:
>
> DirtyCow root privilege escalation
> Backing up /usr/bin/passwd to /tmp/bak
> Size of binary: 27832
> Racing, this may take a while..
> thread stopped
> thread stopped
(snip)
> So my question is, what has been exactly patched to the recently upstream
> kernel.

Thanks for the detailed note.

Because the source code is available, I did a diff between kernels
3.10.0-327.36.2.el7 and 3.10.0-327.36.3.el7 and am attaching it for
anyone to see.

Akemi

--001a11c16282aaefb3053fafd09c
Content-Type: text/plain; charset="US-ASCII"; name="362to363.diff"
Content-Disposition: attachment; filename="362to363.diff"
Content-Transfer-Encoding: base64
X-Attachment-Id: f_iuphb4qo1
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--001a11c16282aaefb3053fafd09c--
=========================================================================
Date:         Thu, 27 Oct 2016 15:51:11 +0200
Reply-To:     Valentin B <[log in to unmask]>
Sender:       Mailing list for Scientific Linux developers worldwide
              <[log in to unmask]>
From:         Valentin B <[log in to unmask]>
Subject:      intel i915 driver problems
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
              protocol="application/pgp-signature";
              boundary="NbU0i7soI7Fc2po0hmu2ej6190WuDOdHB"
Message-ID:  <[log in to unmask]>

--NbU0i7soI7Fc2po0hmu2ej6190WuDOdHB
Content-Type: multipart/mixed; boundary="HVhpNLrdJa9HRK4cEa84Q1Vmetd6E8tj5";
 protected-headers="v1"
From: Valentin B <[log in to unmask]>
To: "[log in to unmask]"
 <[log in to unmask]>
Message-ID: <[log in to unmask]>
Subject: intel i915 driver problems

--HVhpNLrdJa9HRK4cEa84Q1Vmetd6E8tj5
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Hi,

On a machine with the intel integrated card, more specifically

00:02.0 VGA compatible controller: Intel Corporation Sky Lake Integrated
Graphics (rev 06)

seem to be some issues with recognizing the monitor properties.

Running `xrandr`  the following output is displayed:

xrandr: Failed to get size of gamma for output default
Screen 0: minimum 1024 x 768, current 1024 x 768, maximum 1024 x 768
default connected primary 1024x768+0+0 0mm x 0mm
   1024x768      76.00*


I've managed to solve the problem using the following steps  as also
explained here:
http://www.linuxquestions.org/questions/centos-111/cannot-change-screen-r=
esolution-on-unknown-display-in-centos7-4175583712/


rpm --import https://www.elrepo.org/RPM-GPG-KEY-elrepo.org
rpm -Uvh http://www.elrepo.org/elrepo-release-7.0-2.el7.elrepo.noarch.rpm=

yum install yum-plugin-fastestmirror
yum --enablerepo=3Delrepo-kernel install kernel-ml


I actually would like to avoid using kernel-ml  since this doesn't
provide any warranty concerning security and system stability in
general.  Has anyone been able to solve the problem differently?

Thanks!
--=20

Valentin Bajrami
Kapteyn Astronomical Institute
University of Groningen
Postbus 800
NL-9700 AV Groningen
The Netherlands

Phone:    +31-(0)50-3634068

PGP Fingerprint: 50D7 E233 C2E0 1C81 BB7F F8D8 E51B CF89 A52E 5271


--HVhpNLrdJa9HRK4cEa84Q1Vmetd6E8tj5--

--NbU0i7soI7Fc2po0hmu2ej6190WuDOdHB
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
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=L3c/
-----END PGP SIGNATURE-----

--NbU0i7soI7Fc2po0hmu2ej6190WuDOdHB--
=========================================================================
Date:         Thu, 27 Oct 2016 08:54:23 -0500
Reply-To:     Pat Riehecky <[log in to unmask]>
Sender:       Mailing list for Scientific Linux developers worldwide
              <[log in to unmask]>
From:         Pat Riehecky <[log in to unmask]>
Subject:      Re: intel i915 driver problems
Comments: To: Valentin B <[log in to unmask]>
In-Reply-To:  <[log in to unmask]>
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"; format=flowed
Content-Transfer-Encoding: 7bit
Message-ID:  <[log in to unmask]>

Might this be related? https://bugzilla.redhat.com/show_bug.cgi?id=1306841

On 10/27/2016 08:51 AM, Valentin B wrote:
> Hi,
>
> On a machine with the intel integrated card, more specifically
>
> 00:02.0 VGA compatible controller: Intel Corporation Sky Lake Integrated
> Graphics (rev 06)
>
> seem to be some issues with recognizing the monitor properties.
>
> Running `xrandr`  the following output is displayed:
>
> xrandr: Failed to get size of gamma for output default
> Screen 0: minimum 1024 x 768, current 1024 x 768, maximum 1024 x 768
> default connected primary 1024x768+0+0 0mm x 0mm
>     1024x768      76.00*
>
>
> I've managed to solve the problem using the following steps  as also
> explained here:
> http://www.linuxquestions.org/questions/centos-111/cannot-change-screen-resolution-on-unknown-display-in-centos7-4175583712/
>
>
> rpm --import https://www.elrepo.org/RPM-GPG-KEY-elrepo.org
> rpm -Uvh http://www.elrepo.org/elrepo-release-7.0-2.el7.elrepo.noarch.rpm
> yum install yum-plugin-fastestmirror
> yum --enablerepo=elrepo-kernel install kernel-ml
>
>
> I actually would like to avoid using kernel-ml  since this doesn't
> provide any warranty concerning security and system stability in
> general.  Has anyone been able to solve the problem differently?
>
> Thanks!
=========================================================================
Date:         Thu, 27 Oct 2016 15:56:22 +0200
Reply-To:     Valentin B <[log in to unmask]>
Sender:       Mailing list for Scientific Linux developers worldwide
              <[log in to unmask]>
From:         Valentin B <[log in to unmask]>
Subject:      Re: intel i915 driver problems
Comments: To: Pat Riehecky <[log in to unmask]>
In-Reply-To:  <[log in to unmask]>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
              protocol="application/pgp-signature";
              boundary="axUUDNW1S7Rr7mKInPw15mnp8OwLi7Q9A"
Message-ID:  <[log in to unmask]>

--axUUDNW1S7Rr7mKInPw15mnp8OwLi7Q9A
Content-Type: multipart/mixed; boundary="O5JOGq0kEWwJ0p5ejqw59P2GTe0SUhImp";
 protected-headers="v1"
From: Valentin B <[log in to unmask]>
To: Pat Riehecky <[log in to unmask]>, [log in to unmask]
Message-ID: <[log in to unmask]>
Subject: Re: [SCIENTIFIC-LINUX-DEVEL] intel i915 driver problems
References: <[log in to unmask]>
 <[log in to unmask]>
In-Reply-To: <[log in to unmask]>

--O5JOGq0kEWwJ0p5ejqw59P2GTe0SUhImp
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Hi Pat,

This is exactly the same problem I'm experiencing. I'll have to wait
till 7.3 is pushed out then.  Thanks for your quick response.

Valentin

On 10/27/2016 03:54 PM, Pat Riehecky wrote:
> Might this be related? https://bugzilla.redhat.com/show_bug.cgi?id=3D13=
06841
>=20
> On 10/27/2016 08:51 AM, Valentin B wrote:
>> Hi,
>>
>> On a machine with the intel integrated card, more specifically
>>
>> 00:02.0 VGA compatible controller: Intel Corporation Sky Lake Integrat=
ed
>> Graphics (rev 06)
>>
>> seem to be some issues with recognizing the monitor properties.
>>
>> Running `xrandr`  the following output is displayed:
>>
>> xrandr: Failed to get size of gamma for output default
>> Screen 0: minimum 1024 x 768, current 1024 x 768, maximum 1024 x 768
>> default connected primary 1024x768+0+0 0mm x 0mm
>>     1024x768      76.00*
>>
>>
>> I've managed to solve the problem using the following steps  as also
>> explained here:
>> http://www.linuxquestions.org/questions/centos-111/cannot-change-scree=
n-resolution-on-unknown-display-in-centos7-4175583712/
>>
>>
>>
>> rpm --import https://www.elrepo.org/RPM-GPG-KEY-elrepo.org
>> rpm -Uvh http://www.elrepo.org/elrepo-release-7.0-2.el7.elrepo.noarch.=
rpm
>> yum install yum-plugin-fastestmirror
>> yum --enablerepo=3Delrepo-kernel install kernel-ml
>>
>>
>> I actually would like to avoid using kernel-ml  since this doesn't
>> provide any warranty concerning security and system stability in
>> general.  Has anyone been able to solve the problem differently?
>>
>> Thanks!

--=20

Valentin Bajrami
Kapteyn Astronomical Institute
University of Groningen
Postbus 800
NL-9700 AV Groningen
The Netherlands

Phone:    +31-(0)50-3634068

PGP Fingerprint: 50D7 E233 C2E0 1C81 BB7F F8D8 E51B CF89 A52E 5271


--O5JOGq0kEWwJ0p5ejqw59P2GTe0SUhImp--

--axUUDNW1S7Rr7mKInPw15mnp8OwLi7Q9A
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
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=KN08
-----END PGP SIGNATURE-----

--axUUDNW1S7Rr7mKInPw15mnp8OwLi7Q9A--