--caOsQBL6huKbQJnXFMbuWHMkoTNEXvcGc Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQIcBAEBAgAGBQJYDw5bAAoJEOUbz4mlLlJxDkYP/3hfFwroJBykHuZTad3dDBdb zESCFr63RqZE0cpekQX/iIU0LXd+te51ixtl7qFIBBRuVqH9C+S+4r+ci4WHXGUn Rp5w1qqtfTgUOnDhYfLmQM4IrSnLp+8jmDDP3CAc0+lxaeLwaJh46XrLVNf/oEdE 9eyNJgPBESfQie+KqyZpE8E2pv/v3B3S7n2clNqdLVJx1o7S5EyR2zt2KyPozDz0 x1RswpHTBnFH5j9i9W0Hr+qvK78WaMkJaBs9eImHxdJRroUvCftdaO1Wp1PFhODT lahm4VOd+zH9Bgfi3lcnRe7rUm5T7pPr/paDqLCB4YWEtoU/hM5x/ppFCVOli0kX qvETmw+OX2oY5i0SJoNciVTRmKYNrnmBzho8dBN0zTU9StzaDrxtPf3wm/BemPfC oFOn1u/laIhnMwWqiCHs499HAR2pDKx8AAns6sw2GxBzJbnxz4xNtXOnh7vByNEC v8xsLQKrnCqAe54ZvFqy9C7Je1MMZSt9LyI2qH8mepmgfrllTZf+DdfKix6V015x ClV5bBDw/iDCTpHQKWuNRZHhcxzrFCnNhBcuxuYA5GZ7BTQL/4EjGHfSg5jfrI1Q h5Em22gs9AIJoxcdyNPne54Fzcq0qBeuDZCHtW96/9u8vV7XMeit3g6pEPSE7Wx2 x2xoiXJdSd8R+v1XZKcn =g2JX -----END PGP SIGNATURE----- --caOsQBL6huKbQJnXFMbuWHMkoTNEXvcGc-- ========================================================================= Date: Tue, 25 Oct 2016 05:40:15 -0700 Reply-To: Akemi Yagi <[log in to unmask]> Sender: Mailing list for Scientific Linux developers worldwide <[log in to unmask]> From: Akemi Yagi <[log in to unmask]> Subject: Re: Cowroot vulnerability Comments: To: Valentin B <[log in to unmask]> In-Reply-To: <[log in to unmask]> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="001a11c16282aaefb3053fafd09c" Message-ID: <[log in to unmask]> --001a11c16282aaefb3053fafd09c Content-Type: text/plain; charset="UTF-8" On Tue, Oct 25, 2016 at 12:48 AM, Valentin B <[log in to unmask]> wrote: > Hi Akemi, > > The fix allows me to run the cow vulnerability but it blocks which is good. > > See the following: > > DirtyCow root privilege escalation > Backing up /usr/bin/passwd to /tmp/bak > Size of binary: 27832 > Racing, this may take a while.. > thread stopped > thread stopped (snip) > So my question is, what has been exactly patched to the recently upstream > kernel. Thanks for the detailed note. Because the source code is available, I did a diff between kernels 3.10.0-327.36.2.el7 and 3.10.0-327.36.3.el7 and am attaching it for anyone to see. Akemi --001a11c16282aaefb3053fafd09c Content-Type: text/plain; charset="US-ASCII"; name="362to363.diff" Content-Disposition: attachment; filename="362to363.diff" Content-Transfer-Encoding: base64 X-Attachment-Id: f_iuphb4qo1 ZGlmZiAtdU5wciBsaW51eC0zLjEwLjAtMzI3LjM2LjIuZWw3L2luY2x1ZGUvbGludXgvbW0uaCBs aW51eC0zLjEwLjAtMzI3LjM2LjMuZWw3L2luY2x1ZGUvbGludXgvbW0uaAotLS0gbGludXgtMy4x MC4wLTMyNy4zNi4yLmVsNy9pbmNsdWRlL2xpbnV4L21tLmgJMjAxNi0wOS0yNyAxMToxOToxNy4w MDAwMDAwMDAgLTA3MDAKKysrIGxpbnV4LTMuMTAuMC0zMjcuMzYuMy5lbDcvaW5jbHVkZS9saW51 eC9tbS5oCTIwMTYtMTAtMTkgMjM6NDM6MjEuMDAwMDAwMDAwIC0wNzAwCkBAIC0xOTcxLDYgKzE5 NzEsNyBAQCBzdGF0aWMgaW5saW5lIHN0cnVjdCBwYWdlICpmb2xsb3dfcGFnZShzCiAjZGVmaW5l IEZPTExfTlVNQQkweDIwMAkvKiBmb3JjZSBOVU1BIGhpbnRpbmcgcGFnZSBmYXVsdCAqLwogI2Rl ZmluZSBGT0xMX01JR1JBVElPTgkweDQwMAkvKiB3YWl0IGZvciBwYWdlIHRvIHJlcGxhY2UgbWln cmF0aW9uIGVudHJ5ICovCiAjZGVmaW5lIEZPTExfVFJJRUQJMHg4MDAJLyogYSByZXRyeSwgcHJl dmlvdXMgcGFzcyBzdGFydGVkIGFuIElPICovCisjZGVmaW5lIEZPTExfQ09XCTB4NDAwMAkvKiBp bnRlcm5hbCBHVVAgZmxhZyAqLwogCiB0eXBlZGVmIGludCAoKnB0ZV9mbl90KShwdGVfdCAqcHRl LCBwZ3RhYmxlX3QgdG9rZW4sIHVuc2lnbmVkIGxvbmcgYWRkciwKIAkJCXZvaWQgKmRhdGEpOwpk aWZmIC11TnByIGxpbnV4LTMuMTAuMC0zMjcuMzYuMi5lbDcvTWFrZWZpbGUgbGludXgtMy4xMC4w LTMyNy4zNi4zLmVsNy9NYWtlZmlsZQotLS0gbGludXgtMy4xMC4wLTMyNy4zNi4yLmVsNy9NYWtl ZmlsZQkyMDE2LTA5LTI3IDExOjE5OjE3LjAwMDAwMDAwMCAtMDcwMAorKysgbGludXgtMy4xMC4w LTMyNy4zNi4zLmVsNy9NYWtlZmlsZQkyMDE2LTEwLTE5IDIzOjQzOjIxLjAwMDAwMDAwMCAtMDcw MApAQCAtNSw3ICs1LDcgQEAgRVhUUkFWRVJTSU9OID0KIE5BTUUgPSBVbmljeWNsaW5nIEdvcmls bGEKIFJIRUxfTUFKT1IgPSA3CiBSSEVMX01JTk9SID0gMgotUkhFTF9SRUxFQVNFID0gMzI3LjM2 LjIKK1JIRUxfUkVMRUFTRSA9IDMyNy4zNi4zCiBSSEVMX0RSTV9WRVJTSU9OID0gNAogUkhFTF9E Uk1fUEFUQ0hMRVZFTCA9IDEKIFJIRUxfRFJNX1NVQkxFVkVMID0gMApkaWZmIC11TnByIGxpbnV4 LTMuMTAuMC0zMjcuMzYuMi5lbDcvbW0vbWVtb3J5LmMgbGludXgtMy4xMC4wLTMyNy4zNi4zLmVs Ny9tbS9tZW1vcnkuYwotLS0gbGludXgtMy4xMC4wLTMyNy4zNi4yLmVsNy9tbS9tZW1vcnkuYwky MDE2LTA5LTI3IDExOjE5OjE3LjAwMDAwMDAwMCAtMDcwMAorKysgbGludXgtMy4xMC4wLTMyNy4z Ni4zLmVsNy9tbS9tZW1vcnkuYwkyMDE2LTEwLTE5IDIzOjQzOjIxLjAwMDAwMDAwMCAtMDcwMApA QCAtMTMxLDYgKzEzMSwxNSBAQCBzdGF0aWMgaW50IF9faW5pdCBpbml0X3plcm9fcGZuKHZvaWQp CiB9CiBjb3JlX2luaXRjYWxsKGluaXRfemVyb19wZm4pOwogCisvKgorICogRk9MTF9GT1JDRSBj YW4gd3JpdGUgdG8gZXZlbiB1bndyaXRhYmxlIHB0ZSdzLCBidXQgb25seQorICogYWZ0ZXIgd2Un dmUgZ29uZSB0aHJvdWdoIGEgQ09XIGN5Y2xlIGFuZCB0aGV5IGFyZSBkaXJ0eS4KKyAqLworc3Rh dGljIGlubGluZSBib29sIGNhbl9mb2xsb3dfd3JpdGVfcHRlKHB0ZV90IHB0ZSwgdW5zaWduZWQg aW50IGZsYWdzKQoreworCXJldHVybiBwdGVfd3JpdGUocHRlKSB8fAorCQkoKGZsYWdzICYgRk9M TF9GT1JDRSkgJiYgKGZsYWdzICYgRk9MTF9DT1cpICYmIHB0ZV9kaXJ0eShwdGUpKTsKK30KIAog I2lmIGRlZmluZWQoU1BMSVRfUlNTX0NPVU5USU5HKQogCkBAIC0xNTg4LDcgKzE1OTcsNyBAQCBz cGxpdF9mYWxsdGhyb3VnaDoKIAl9CiAJaWYgKChmbGFncyAmIEZPTExfTlVNQSkgJiYgcHRlX251 bWEocHRlKSkKIAkJZ290byBub19wYWdlOwotCWlmICgoZmxhZ3MgJiBGT0xMX1dSSVRFKSAmJiAh cHRlX3dyaXRlKHB0ZSkpCisJaWYgKChmbGFncyAmIEZPTExfV1JJVEUpICYmICFjYW5fZm9sbG93 X3dyaXRlX3B0ZShwdGUsIGZsYWdzKSkKIAkJZ290byB1bmxvY2s7CiAKIAlwYWdlID0gdm1fbm9y bWFsX3BhZ2Uodm1hLCBhZGRyZXNzLCBwdGUpOwpAQCAtMTkwMCw3ICsxOTA5LDcgQEAgbG9uZyBf X2dldF91c2VyX3BhZ2VzKHN0cnVjdCB0YXNrX3N0cnVjdAogCQkJCSAqLwogCQkJCWlmICgocmV0 ICYgVk1fRkFVTFRfV1JJVEUpICYmCiAJCQkJICAgICEodm1hLT52bV9mbGFncyAmIFZNX1dSSVRF KSkKLQkJCQkJZm9sbF9mbGFncyAmPSB+Rk9MTF9XUklURTsKKwkJCQkJZm9sbF9mbGFncyB8PSBG T0xMX0NPVzsKIAogCQkJCWNvbmRfcmVzY2hlZCgpOwogCQkJfQo= --001a11c16282aaefb3053fafd09c-- ========================================================================= Date: Thu, 27 Oct 2016 15:51:11 +0200 Reply-To: Valentin B <[log in to unmask]> Sender: Mailing list for Scientific Linux developers worldwide <[log in to unmask]> From: Valentin B <[log in to unmask]> Subject: intel i915 driver problems MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="NbU0i7soI7Fc2po0hmu2ej6190WuDOdHB" Message-ID: <[log in to unmask]> --NbU0i7soI7Fc2po0hmu2ej6190WuDOdHB Content-Type: multipart/mixed; boundary="HVhpNLrdJa9HRK4cEa84Q1Vmetd6E8tj5"; protected-headers="v1" From: Valentin B <[log in to unmask]> To: "[log in to unmask]" <[log in to unmask]> Message-ID: <[log in to unmask]> Subject: intel i915 driver problems --HVhpNLrdJa9HRK4cEa84Q1Vmetd6E8tj5 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi, On a machine with the intel integrated card, more specifically 00:02.0 VGA compatible controller: Intel Corporation Sky Lake Integrated Graphics (rev 06) seem to be some issues with recognizing the monitor properties. Running `xrandr` the following output is displayed: xrandr: Failed to get size of gamma for output default Screen 0: minimum 1024 x 768, current 1024 x 768, maximum 1024 x 768 default connected primary 1024x768+0+0 0mm x 0mm 1024x768 76.00* I've managed to solve the problem using the following steps as also explained here: http://www.linuxquestions.org/questions/centos-111/cannot-change-screen-r= esolution-on-unknown-display-in-centos7-4175583712/ rpm --import https://www.elrepo.org/RPM-GPG-KEY-elrepo.org rpm -Uvh http://www.elrepo.org/elrepo-release-7.0-2.el7.elrepo.noarch.rpm= yum install yum-plugin-fastestmirror yum --enablerepo=3Delrepo-kernel install kernel-ml I actually would like to avoid using kernel-ml since this doesn't provide any warranty concerning security and system stability in general. Has anyone been able to solve the problem differently? Thanks! --=20 Valentin Bajrami Kapteyn Astronomical Institute University of Groningen Postbus 800 NL-9700 AV Groningen The Netherlands Phone: +31-(0)50-3634068 PGP Fingerprint: 50D7 E233 C2E0 1C81 BB7F F8D8 E51B CF89 A52E 5271 --HVhpNLrdJa9HRK4cEa84Q1Vmetd6E8tj5-- --NbU0i7soI7Fc2po0hmu2ej6190WuDOdHB Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQIcBAEBAgAGBQJYEgZPAAoJEOUbz4mlLlJxSdEP/3SCsP/hWsthQuoUu1W2eXPH 79GGlcal18yPBlMvDfQyfW1eNUI4K8Y8R0T7fkrHr/XZLE8keQk20vidFZYdFdDb 1A8IDeZqkiiPpqVDhOt04Zk6VB1bqVxVxQFKHGgE1mIgoAcAcni/SysCF05WTdiM wKOCx1dyYrwnx1jOVm2l/t0g8Pf6vRx2b9Fi+zfmcZF9fadMcUwzNG0F3MPbbtBi T5X3xoCVhIkDW8xgEOPYVZXr7KbKUNTvHJP35ufoUhh13FvSC5XzX56oX7BCVIJY /JmEdX0QlgT8aAuAOFIODcp0IFH3DJl/X+xsCMuOBD8693z7w/sKgQAm08TX3maR 79y7hIBNv+oXCpoDZ5vLMz5BpNaA9sKZaEvMUr3Xg86JdXfX3bNlwRWVpEVOEJo4 FX/DekB6dmVi/YiJBxSwGzexCPPpR1CHEKy66IreZEspU9G9w7JScnKQScS0JbDT LPXHCn1tsWRUxI/U/TEnmRUVf8YG1TsxYHOfGvy5XhAMsqzElxKEVoAMvNlA9ID9 Pd3z5OtuEQY/UUkpTv+eRVI/lDrvl8IznEnuYQkqy6l52E+LLYo2hIWq4pflxCup nBD6H5VEjvkKrj3+kxFeNrO86X+yCUhHMyQH/MBJDX7S0FK7+HoDm1fYP9hx2m3B 5Hc5aDCCRkP8h+WFHMPt =L3c/ -----END PGP SIGNATURE----- --NbU0i7soI7Fc2po0hmu2ej6190WuDOdHB-- ========================================================================= Date: Thu, 27 Oct 2016 08:54:23 -0500 Reply-To: Pat Riehecky <[log in to unmask]> Sender: Mailing list for Scientific Linux developers worldwide <[log in to unmask]> From: Pat Riehecky <[log in to unmask]> Subject: Re: intel i915 driver problems Comments: To: Valentin B <[log in to unmask]> In-Reply-To: <[log in to unmask]> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8"; format=flowed Content-Transfer-Encoding: 7bit Message-ID: <[log in to unmask]> Might this be related? https://bugzilla.redhat.com/show_bug.cgi?id=1306841 On 10/27/2016 08:51 AM, Valentin B wrote: > Hi, > > On a machine with the intel integrated card, more specifically > > 00:02.0 VGA compatible controller: Intel Corporation Sky Lake Integrated > Graphics (rev 06) > > seem to be some issues with recognizing the monitor properties. > > Running `xrandr` the following output is displayed: > > xrandr: Failed to get size of gamma for output default > Screen 0: minimum 1024 x 768, current 1024 x 768, maximum 1024 x 768 > default connected primary 1024x768+0+0 0mm x 0mm > 1024x768 76.00* > > > I've managed to solve the problem using the following steps as also > explained here: > http://www.linuxquestions.org/questions/centos-111/cannot-change-screen-resolution-on-unknown-display-in-centos7-4175583712/ > > > rpm --import https://www.elrepo.org/RPM-GPG-KEY-elrepo.org > rpm -Uvh http://www.elrepo.org/elrepo-release-7.0-2.el7.elrepo.noarch.rpm > yum install yum-plugin-fastestmirror > yum --enablerepo=elrepo-kernel install kernel-ml > > > I actually would like to avoid using kernel-ml since this doesn't > provide any warranty concerning security and system stability in > general. Has anyone been able to solve the problem differently? > > Thanks! ========================================================================= Date: Thu, 27 Oct 2016 15:56:22 +0200 Reply-To: Valentin B <[log in to unmask]> Sender: Mailing list for Scientific Linux developers worldwide <[log in to unmask]> From: Valentin B <[log in to unmask]> Subject: Re: intel i915 driver problems Comments: To: Pat Riehecky <[log in to unmask]> In-Reply-To: <[log in to unmask]> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="axUUDNW1S7Rr7mKInPw15mnp8OwLi7Q9A" Message-ID: <[log in to unmask]> --axUUDNW1S7Rr7mKInPw15mnp8OwLi7Q9A Content-Type: multipart/mixed; boundary="O5JOGq0kEWwJ0p5ejqw59P2GTe0SUhImp"; protected-headers="v1" From: Valentin B <[log in to unmask]> To: Pat Riehecky <[log in to unmask]>, [log in to unmask] Message-ID: <[log in to unmask]> Subject: Re: [SCIENTIFIC-LINUX-DEVEL] intel i915 driver problems References: <[log in to unmask]> <[log in to unmask]> In-Reply-To: <[log in to unmask]> --O5JOGq0kEWwJ0p5ejqw59P2GTe0SUhImp Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi Pat, This is exactly the same problem I'm experiencing. I'll have to wait till 7.3 is pushed out then. Thanks for your quick response. Valentin On 10/27/2016 03:54 PM, Pat Riehecky wrote: > Might this be related? https://bugzilla.redhat.com/show_bug.cgi?id=3D13= 06841 >=20 > On 10/27/2016 08:51 AM, Valentin B wrote: >> Hi, >> >> On a machine with the intel integrated card, more specifically >> >> 00:02.0 VGA compatible controller: Intel Corporation Sky Lake Integrat= ed >> Graphics (rev 06) >> >> seem to be some issues with recognizing the monitor properties. >> >> Running `xrandr` the following output is displayed: >> >> xrandr: Failed to get size of gamma for output default >> Screen 0: minimum 1024 x 768, current 1024 x 768, maximum 1024 x 768 >> default connected primary 1024x768+0+0 0mm x 0mm >> 1024x768 76.00* >> >> >> I've managed to solve the problem using the following steps as also >> explained here: >> http://www.linuxquestions.org/questions/centos-111/cannot-change-scree= n-resolution-on-unknown-display-in-centos7-4175583712/ >> >> >> >> rpm --import https://www.elrepo.org/RPM-GPG-KEY-elrepo.org >> rpm -Uvh http://www.elrepo.org/elrepo-release-7.0-2.el7.elrepo.noarch.= rpm >> yum install yum-plugin-fastestmirror >> yum --enablerepo=3Delrepo-kernel install kernel-ml >> >> >> I actually would like to avoid using kernel-ml since this doesn't >> provide any warranty concerning security and system stability in >> general. Has anyone been able to solve the problem differently? >> >> Thanks! --=20 Valentin Bajrami Kapteyn Astronomical Institute University of Groningen Postbus 800 NL-9700 AV Groningen The Netherlands Phone: +31-(0)50-3634068 PGP Fingerprint: 50D7 E233 C2E0 1C81 BB7F F8D8 E51B CF89 A52E 5271 --O5JOGq0kEWwJ0p5ejqw59P2GTe0SUhImp-- --axUUDNW1S7Rr7mKInPw15mnp8OwLi7Q9A Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQIcBAEBAgAGBQJYEgeGAAoJEOUbz4mlLlJx9qQQAKKtFrQPHLMK9fzCTWKkKyYC 84vZPqaSBFf6wEPrxQaqRa+4BE8aShMjGyeWzcNhb/k6TsIOqvgMCQpkRntJjcFg DVravVw5GhXCpeJGnxjwVjv/ARBl0m+qq62lX5ljmm4K54CX7M3oYCeVUhpaCEQf fZM0QmKyJkd0PNl1nCKwYOjaUf2GShne+W5ogF1aMnGw2ygpS+g1d/cLzNoZTyTO g2gc7IaqTnq1tZsYgvQfDq9Dmgh6oQXIp+rizGRFrZakmm6w62J7Q9kxDjnojfvM NDdr8XiL3i6UtTEgvGtuWfwTABWmp7s7OVQLRJdQUffNRg29IuhHdbVWfnMkYTPK iaUbF4PjFiBCTeToB3rrKmEcI2FI+30RBT0SV1hG3KUXgpCnTn/qDp8fUtF/K/mn n1+YTkBRXMmDz22i94i2pBA498Y3Ots1BYl2vQ+hc9pBCnVVwvyTCnekGbMqdF9o kjsy2OzUnM1VdJEmH15YeI/SmZCAn19H791PJ0DojShnFujIe/JHo2RzoTUCLs62 1BZw5T8UH/Q2xZx2fODhCzgd4OBqUu6bOEqQh70Vv8YyF4PLPVl1Wb8FMlDgXaLd qqlFkmUxYtc+JE/MltIUUe/uwLHlFtZ+LdbLGjoZA/h0AajE77weygbunSfYo0ND 5+bXQjLVuKUDWDvimAVc =KN08 -----END PGP SIGNATURE----- --axUUDNW1S7Rr7mKInPw15mnp8OwLi7Q9A--