FS#9800 - at broken on 2.6.24

Attached to Project: Arch Linux
Opened by Xavier (shining) - Sunday, 09 March 2008, 21:49 GMT
Last edited by Tobias Powalowski (tpowa) - Monday, 24 March 2008, 09:23 GMT
Task Type Bug Report
Category Kernel
Status Closed
Assigned To Tobias Powalowski (tpowa)
Architecture All
Severity Low
Priority Normal
Reported Version 2007.08-2
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

at doesn't work anymore :
> echo foo | at now + 1 minute
warning: commands will be executed using /bin/sh
job 141 at Sun Mar 9 22:44:00 2008
Can't signal atd (permission denied)

That's caused by the CONFIG_SECURITY_FILE_CAPABILITIES option which was enabled in 2.6.24.3-2.
More infos here :
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=463669
http://lkml.org/lkml/2008/2/27/107

Hopefully this will be fixed in upstream soon, there is already a patch available in that lkml thread, so I hope it will be fixed in 2.6.24.4.
I am just reporting this bug as an information, and for the record.
This task depends upon

Closed by  Tobias Powalowski (tpowa)
Monday, 24 March 2008, 09:23 GMT
Reason for closing:  Fixed
Comment by Roman Kyrylych (Romashka) - Monday, 10 March 2008, 08:26 GMT
there is a working patch on that lkml thread, but it's better wait for a more complete solution (that author of the patch is going to produce soon).
Comment by Roman Kyrylych (Romashka) - Monday, 10 March 2008, 08:32 GMT
Hm, I think this:
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=094972840f2e7c1c6fc9e1a97d817cc17085378e
is equivalent of:
http://lkml.org/lkml/2008/2/27/529 (the original fix)
and is already in .25, so I think it's safe to apply.
Comment by Roman Kyrylych (Romashka) - Monday, 10 March 2008, 08:39 GMT
hmm, no, that's a fix for another issue (wireshark), and the date is before,
though I didn't saw a reply to the question asked here: http://lkml.org/lkml/2008/2/27/248
Comment by Roman Kyrylych (Romashka) - Monday, 10 March 2008, 08:40 GMT
@Xavier: could you please try each patch?
Comment by Xavier (shining) - Monday, 10 March 2008, 11:01 GMT
The correct fix is the following one :
file capabilities: get rid of cap_task_kill
http://lkml.org/lkml/2008/2/27/529

The other one was for another issue (wireshark) :
file capabilities: simplify signal check

So there is just one patch to try. And it will hopefully be in 2.6.24.4 :
http://lkml.org/lkml/2008/2/28/218
Comment by Xavier (shining) - Thursday, 13 March 2008, 19:47 GMT
Btw, it should rather be "at" than "atq" in both the title and the first line of my report, if anyone can fix that :P
Comment by Tobias Powalowski (tpowa) - Thursday, 13 March 2008, 20:51 GMT
will be fixed in 2.6.24.4
Comment by Tobias Powalowski (tpowa) - Thursday, 13 March 2008, 21:00 GMT
ah sorry misread .24.4 queue it's the wireshark patch that will be included
Comment by Tobias Powalowski (tpowa) - Friday, 21 March 2008, 17:23 GMT
fixed in 24.3-4 kernel

Loading...