GNU bug report logs - #21226
FAIL: tests/containers.scm

Previous Next

Full log

Message #11 received at 21226 <at> debbugs.gnu.org (full text, mbox):

From: "Thompson, David" <dthompson2 <at> worcester.edu>
To: Jochem Raat <jchmrt <at> riseup.net>
Cc: 21226 <at> debbugs.gnu.org
Subject: Re: bug#21226: FAIL: tests/containers.scm
Date: Tue, 11 Aug 2015 08:41:54 -0400

Hello Jochem,

On Sun, Aug 9, 2015 at 4:12 PM, Jochem Raat <jchmrt <at> riseup.net> wrote:
> During the running of make check on the guix 0.8.3 source tarball,
> test/containers.scm failed. I don't know enough about guix to understand
> why, but the manual said to report it to this email-adress. Please tell
> me if you need me to do more tests.
>
> Attached are the test-suite.log and containers.log.

Fixed in commit bc459b6, which skips the tests if /proc/self/setgroups
does not exist, rather than allowing a system with a vulnerable kernel
create containers with a new user namespace.

I would like to note that you should update your kernel as soon as
possible, as the lack of /proc/self/setgroups means that you are
running a kernel with a known security vulnerability.  The fix was
introduced in Linux 3.19, but backported to many older kernels,
including 3.13.

Thanks,

- Dave

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.