Bug #512370 “permissions on /dev too lax in lucid” : Bugs : linux package : Ubuntu

Revision history for this message

Marc Deslauriers (mdeslaur) wrote on 2010-01-25:

#1

AlsaDevices.txt Edit (461 bytes, text/plain; charset="utf-8")
AplayDevices.txt Edit (273 bytes, text/plain; charset="utf-8")
BootDmesg.txt Edit (59.2 KiB, text/plain; charset="utf-8")
Card0.Amixer.values.txt Edit (3.7 KiB, text/plain; charset="utf-8")
Card0.Codecs.codec.0.txt Edit (8.9 KiB, text/plain; charset="utf-8")
CurrentDmesg.txt Edit (12.5 KiB, text/plain; charset="utf-8")
Dependencies.txt Edit (1.2 KiB, text/plain; charset="utf-8")
Lspci.txt Edit (17.6 KiB, text/plain; charset="utf-8")
Lsusb.txt Edit (658 bytes, text/plain; charset="utf-8")
PciMultimedia.txt Edit (588 bytes, text/plain; charset="utf-8")
ProcCpuinfo.txt Edit (1.5 KiB, text/plain; charset="utf-8")
ProcInterrupts.txt Edit (1.7 KiB, text/plain; charset="utf-8")
ProcModules.txt Edit (4.9 KiB, text/plain; charset="utf-8")
RfKill.txt Edit (182 bytes, text/plain; charset="utf-8")
UdevDb.txt Edit (135.2 KiB, text/plain; charset="utf-8")
UdevLog.txt Edit (278.7 KiB, text/plain; charset="utf-8")
WifiSyslog.txt Edit (18.6 KiB, text/plain; charset="utf-8")

visibility:

private → public

Tim Gardner (timg-tpi) on 2010-01-25

Changed in linux (Ubuntu Lucid):
assignee:	nobody → Tim Gardner (timg-tpi)
importance:	Undecided → Medium
milestone:	none → lucid-alpha-3
status:	New → In Progress

Revision history for this message

Tim Gardner (timg-tpi) wrote on 2010-01-25:

#2

https://lists.ubuntu.com/archives/kernel-team/2010-January/008464.html

Changed in linux (Ubuntu Lucid):
status:	In Progress → Fix Committed

Revision history for this message

Marc Deslauriers (mdeslaur) wrote on 2010-01-26:

#3

Per Greg KH, there is an additional commit to go with that one:

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=f776c5ec4690b21b3668ad5956774a22c86f541a

They both need to be applied for it to work correctly.

Revision history for this message

Andy Whitcroft (apw) wrote on 2010-01-26:

#4

I have dropped the original patch and pulled in the pair of patches for this from the stable queue. Remains Fix Committed.

Revision history for this message

Marc Deslauriers (mdeslaur) wrote on 2010-01-27:

#5

Apparently this is also needed:

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=9329d1beaeed1a94f030c784dcec5ff973f402c4

Revision history for this message

Launchpad Janitor (janitor) wrote on 2010-01-27:

#6

Download full text (4.5 KiB)

This bug was fixed in the package linux - 2.6.32-12.16

---------------
linux (2.6.32-12.16) lucid; urgency=low

[ Andy Whitcroft ]

  * Revert "SAUCE: acpi battery -- delay first lookup of the battery until
    first use"
  * SAUCE: acpi battery -- move first lookup asynchronous
    - LP: #507211
  * [Config] update configs to cleanup generic configs
  * [Config] disable CONFIG_X86_CPU_DEBUG for amd64
  * [Config] enable USER_NS
    - LP: #480739, #509808

[ Heiko Carstens ]

* (pre-stable) driver-core: fix devtmpfs crash on s390
- LP: #512370

[ John Johansen ]

  * [Config] for server and virtual flavours make CONFIG_SCSI_SYM53C8XX_2=y
    - LP: #494565
  * [Config] VIRTIO=y for server/virtual flavours
    - LP: #494565

[ Kay Sievers ]

* (pre-stable) Driver-Core: devtmpfs - set root directory mode to 0755
- LP: #512370

[ Kees Cook ]

* SAUCE: x86: brk away from exec rand area
- LP: #452175

[ Leann Ogasawara ]

  * [Upstream] e1000: enhance frame fragment detection
    - CVE-2009-4536
  * [Upstream] e1000e: enhance frame fragment detection
    - CVE-2009-4538

[ Sebastian Kapfer ]

  * (pre-stable) Input: ALPS - add interleaved protocol support (Dell E6x00
    series)
    - LP: #296610

[ Upstream Kernel Changes ]

  * inotify: do not reuse watch descriptors
    - LP: #485556
  * inotify: only warn once for inotify problems
  * revert "drivers/video/s3c-fb.c: fix clock setting for Samsung SoC
    Framebuffer"
  * memcg: ensure list is empty at rmdir
  * drm/i915: remove loop in Ironlake interrupt handler
  * block: Fix incorrect reporting of partition alignment
  * x86, mce: Thermal monitoring depends on APIC being enabled
  * futexes: Remove rw parameter from get_futex_key()
  * page allocator: update NR_FREE_PAGES only when necessary
  * x86, apic: use physical mode for IBM summit platforms
  * edac: i5000_edac critical fix panic out of bounds
  * x86: SGI UV: Fix mapping of MMIO registers
  * mfd: WM835x GPIO direction register is not locked
  * mfd: Correct WM835x ISINK ramp time defines
  * ALSA: hda - Fix missing capture mixer for ALC861/660 codecs
  * V4L/DVB (13868): gspca - sn9c20x: Fix test of unsigned.
  * reiserfs: truncate blocks not used by a write
  * HID: add device IDs for new model of Apple Wireless Keyboard
  * PCI/cardbus: Add a fixup hook and fix powerpc
  * Input: pmouse - move Sentelic probe down the list
  * asus-laptop: add Lenovo SL hotkey support
  * sched: Fix cpu_clock() in NMIs, on !CONFIG_HAVE_UNSTABLE_SCHED_CLOCK
  * sparc64: Fix NMI programming when perf events are active.
  * sparc64: Fix Niagara2 perf event handling.
  * i2c: Do not use device name after device_unregister
  * i2c/pca: Don't use *_interruptible
  * serial/8250_pnp: add a new Fujitsu Wacom Tablet PC device
  * sched: Fix task priority bug
  * vfs: Fix vmtruncate() regression
  * Linux 2.6.32.5
  * x86, msr/cpuid: Register enough minors for the MSR and CPUID drivers
  * V4L/DVB (13900): gspca - sunplus: Fix bridge exchanges.
  * Staging: asus_oled: fix oops in 2.6.32.2
  * Staging: hv: fix smp problems in the hyperv core code
  * tty: fix race in tty_fasync
  * ecryptfs: use after free
  * ecryptfs: initi...

This bug was fixed in the package linux - 2.6.32-12.16

---------------
linux (2.6.32-12.16) lucid; urgency=low

[ Andy Whitcroft ]

* Revert "SAUCE: acpi battery -- delay first lookup of the battery until
    first use"
  * SAUCE: acpi battery -- move first lookup asynchronous
    - LP: #507211
  * [Config] update configs to cleanup generic configs
  * [Config] disable CONFIG_X86_CPU_DEBUG for amd64
  * [Config] enable USER_NS
    - LP: #480739, #509808

[ Heiko Carstens ]

* (pre-stable) driver-core: fix devtmpfs crash on s390
    - LP: #512370

[ John Johansen ]

* [Config] for server and virtual flavours make CONFIG_SCSI_SYM53C8XX_2=y
    - LP: #494565
  * [Config] VIRTIO=y for server/virtual flavours
    - LP: #494565

[ Kay Sievers ]

* (pre-stable) Driver-Core: devtmpfs - set root directory mode to 0755
    - LP: #512370

[ Kees Cook ]

* SAUCE: x86: brk away from exec rand area
    - LP: #452175

[ Leann Ogasawara ]

* [Upstream] e1000: enhance frame fragment detection
    - CVE-2009-4536
  * [Upstream] e1000e: enhance frame fragment detection
    - CVE-2009-4538

[ Sebastian Kapfer ]

* (pre-stable) Input: ALPS - add interleaved protocol support (Dell E6x00
    series)
    - LP: #296610

[ Upstream Kernel Changes ]

* inotify: do not reuse watch descriptors
    - LP: #485556
  * inotify: only warn once for inotify problems
  * revert "drivers/video/s3c-fb.c: fix clock setting for Samsung SoC
    Framebuffer"
  * memcg: ensure list is empty at rmdir
  * drm/i915: remove loop in Ironlake interrupt handler
  * block: Fix incorrect reporting of partition alignment
  * x86, mce: Thermal monitoring depends on APIC being enabled
  * futexes: Remove rw parameter from get_futex_key()
  * page allocator: update NR_FREE_PAGES only when necessary
  * x86, apic: use physical mode for IBM summit platforms
  * edac: i5000_edac critical fix panic out of bounds
  * x86: SGI UV: Fix mapping of MMIO registers
  * mfd: WM835x GPIO direction register is not locked
  * mfd: Correct WM835x ISINK ramp time defines
  * ALSA: hda - Fix missing capture mixer for ALC861/660 codecs
  * V4L/DVB (13868): gspca - sn9c20x: Fix test of unsigned.
  * reiserfs: truncate blocks not used by a write
  * HID: add device IDs for new model of Apple Wireless Keyboard
  * PCI/cardbus: Add a fixup hook and fix powerpc
  * Input: pmouse - move Sentelic probe down the list
  * asus-laptop: add Lenovo SL hotkey support
  * sched: Fix cpu_clock() in NMIs, on !CONFIG_HAVE_UNSTABLE_SCHED_CLOCK
  * sparc64: Fix NMI programming when perf events are active.
  * sparc64: Fix Niagara2 perf event handling.
  * i2c: Do not use device name after device_unregister
  * i2c/pca: Don't use *_interruptible
  * serial/8250_pnp: add a new Fujitsu Wacom Tablet PC device
  * sched: Fix task priority bug
  * vfs: Fix vmtruncate() regression
  * Linux 2.6.32.5
  * x86, msr/cpuid: Register enough minors for the MSR and CPUID drivers
  * V4L/DVB (13900): gspca - sunplus: Fix bridge exchanges.
  * Staging: asus_oled: fix oops in 2.6.32.2
  * Staging: hv: fix smp problems in the hyperv core code
  * tty: fix race in tty_fasync
  * ecryptfs: use after free
  * ecryptfs: initialize private persistent file before dereferencing
    pointer
  * nozomi: quick fix for the close/close bug
  * serial: 8250_pnp: use wildcard for serial Wacom tablets
  * usb: serial: fix memory leak in generic driver
  * USB: fix bitmask merge error
  * USB: Don't use GFP_KERNEL while we cannot reset a storage device
  * USB: EHCI: fix handling of unusual interrupt intervals
  * USB: EHCI & UHCI: fix race between root-hub suspend and port resume
  * USB: add missing delay during remote wakeup
  * USB: add speed values for USB 3.0 and wireless controllers
  * ACPI: EC: Accelerate query execution
  * ACPI: EC: Add wait for irq storm
  * SCSI: enclosure: fix oops while iterating enclosure_status array
  * drm/i915: Read the response after issuing DDC bus switch command
  * drm/i915: try another possible DDC bus for the SDVO device with
    multiple outputs
  * block: bdev_stack_limits wrapper
  * DM: Fix device mapper topology stacking
  * x86/PCI/PAT: return EINVAL for pci mmap WC request for !pat_enabled
  * USB: fix usbstorage for 2770:915d delivers no FAT
  * vmalloc: remove BUG_ON due to racy counting of VM_LAZY_FREE
  * perf timechart: Use tid not pid for COMM change
  * perf events: Dont report side-band events on each cpu for
    per-task-per-cpu events
  * perf: Honour event state for aux stream data
  * Linux 2.6.32.6
 -- Andy Whitcroft <apw@canonical.com>   Wed, 27 Jan 2010 16:40:23 +0000

Changed in linux (Ubuntu Lucid):
status:	Fix Committed → Fix Released

Affects		Status	Importance	Assigned to	Milestone
	linux (Ubuntu)	Fix Released	Medium	Tim Gardner	Ubuntu lucid-alpha-3
	Lucid	Fix Released	Medium	Tim Gardner	Ubuntu lucid-alpha-3

Ubuntu
linux package

permissions on /dev too lax in lucid

Bug Description

Related branches

CVE References

Other bug subscribers

Related blueprints

Bug attachments

Remote bug watches

Ubuntulinux package

permissions on /dev too lax in lucid

Bug Description

Related branches

CVE References

Other bug subscribers

Related blueprints

Bug attachments

Remote bug watches

Ubuntu
linux package