| 00:03.52 | *** join/#maemo valdyn (~valdyn@host-88-217-143-53.customer.m-online.net) |
| 00:21.58 | *** join/#maemo infobot (~infobot@rikers.org) |
| 00:21.58 | *** topic/#maemo is Welcome to #maemo http://maemo.org/intro/ | DONT FORGET TO VOTE FOR COUNCIL! https://maemo.org/vote/ | N9/harmattan related questions please in #harmattan ! | "firmware" see ~lf ~tabletsdev ~combined ~emmc ~flasher sdk: ~sb | http://wiki.maemo.org/Community_Council | Source: http://wiki.maemo.org/Sources | Chanlog: http://mg.pov.lt/maemo-irclog |
| 00:40.53 | *** join/#maemo xes (~xes@unaffiliated/xes) |
| 01:12.00 | *** join/#maemo juiceme (~juice@cerebro.liukuma.net) |
| 02:37.51 | Oksana | Anybody has a build environment? It would be nice to see armel uploaded to Autobuilder, because apkenv_42.7.0_armel.deb here https://github.com/thp/apkenv/releases is apparently for harmattan? |
| 02:52.46 | *** join/#maemo dos1 (~dos1@neo900/coreteam/dos) |
| 03:18.16 | *** join/#maemo pagurus (~user@p4FDC364A.dip0.t-ipconnect.de) |
| 04:44.51 | *** join/#maemo L29Ah (~L29Ah@31.173.81.18) |
| 04:54.16 | stryngs | Anyone here goin to DEFCON? |
| 05:37.15 | Oksana | Not me. It's USA, right? Los Angeles or something? Too far away. |
| 06:02.24 | *** join/#maemo dafox (~dafox@92.69.231.77) |
| 06:16.58 | *** join/#maemo xes (~xes@unaffiliated/xes) |
| 06:23.12 | *** join/#maemo M4rtinK (~M4rtinK@77.48.149.46) |
| 06:25.27 | *** join/#maemo xy2_ (~xy2_@94.239.177.175) |
| 06:31.44 | *** join/#maemo dmth|intevation (~dmth|inte@2001:470:747a:2a:6af7:28ff:fe64:1ded) |
| 06:35.58 | *** join/#maemo hadara (hadara@bsd.ee) |
| 06:37.25 | *** join/#maemo brolin_empey (~brolin@brolin.be) |
| 06:40.47 | *** join/#maemo Kilroo (~Kilroo@98.27.26.236) |
| 06:57.41 | *** join/#maemo chainsawbike (~chainsawb@unaffiliated/chainsawbike) |
| 07:02.53 | *** join/#maemo eMHa (~mh@81.26.162.98) |
| 07:06.23 | *** join/#maemo silviof (~silviof@unaffiliated/silviof) |
| 07:15.11 | *** join/#maemo err0r3o3_ (~err0r3o3@213-240-104-92.adsl.highway.telekom.at) |
| 07:29.06 | *** join/#maemo florian (~fuchs@Maemo/community/contributor/florian) |
| 07:31.31 | Oksana | Okay, http://www.ebay.com.au/itm/172768538525 listed |
| 07:35.18 | *** join/#maemo guerby (~guerby@april/board/guerby) |
| 07:50.42 | *** join/#maemo peetah (~peetah@cha92-9-82-236-202-86.fbx.proxad.net) |
| 08:00.47 | *** join/#maemo xorly (~xorly@ip-86-49-24-93.net.upcbroadband.cz) |
| 08:06.44 | *** join/#maemo jskarvad (~jskarvad@redhat/jskarvad) |
| 08:32.44 | *** join/#maemo Kabouik (~kabouik@129.242.224.21) |
| 08:50.29 | *** join/#maemo mickname (~mickname@2001:708:30:1300:468a:5bff:fe24:e59e) |
| 08:59.29 | *** join/#maemo ced117 (~ced117@opensuse/member/ced117) |
| 09:10.44 | *** join/#maemo fuz_ (~eric@ks.cpbm.eu) |
| 09:13.35 | *** join/#maemo chainsawbike (~chainsawb@unaffiliated/chainsawbike) |
| 09:43.20 | *** join/#maemo fuz_ (~eric@ks.cpbm.eu) |
| 09:47.13 | *** join/#maemo ginggs (~quassel@2a05:d018:c1e:8d00:c473:4128:ae2d:2c36) |
| 10:15.07 | *** join/#maemo florian_ (~fuchs@p5DE3C56A.dip0.t-ipconnect.de) |
| 10:27.57 | *** join/#maemo NeKit (~nekit@85-95-160-57-dialup.saransk.ru) |
| 10:28.06 | *** join/#maemo xorly (~xorly@ip-86-49-24-93.net.upcbroadband.cz) |
| 10:32.39 | *** part/#maemo rosseaux (~BeRo@2a00:1828:2000:859::2) |
| 10:51.59 | *** join/#maemo Trizt (~user@ukko.aho.hk) |
| 11:02.05 | *** join/#maemo chem|st (~mayor@svn.unix-ag.uni-kl.de) |
| 11:12.10 | *** join/#maemo xy2_ (~xy2_@66.245.16.93.rev.sfr.net) |
| 12:49.42 | *** join/#maemo xy2_ (~xy2_@93.245.16.93.rev.sfr.net) |
| 12:58.02 | *** join/#maemo xy2_ (~xy2_@102.245.16.93.rev.sfr.net) |
| 13:14.11 | *** join/#maemo at1as (~at1as@kurios.r4780y.com) |
| 13:42.56 | *** join/#maemo shentey (~shentey@x4e34e993.dyn.telefonica.de) |
| 14:12.46 | *** join/#maemo eMHa (~mh@p200300738E025000267703FFFE6CC360.dip0.t-ipconnect.de) |
| 14:52.16 | *** join/#maemo xy3_ (~xy2_@117.245.16.93.rev.sfr.net) |
| 15:12.48 | *** join/#maemo shentey (~shentey@x4e35219e.dyn.telefonica.de) |
| 15:15.21 | *** join/#maemo shentey_ (~shentey@x4e35219e.dyn.telefonica.de) |
| 15:43.57 | *** join/#maemo SpeedEvil (~quassel@tor/regular/SpeedEvil) |
| 15:44.12 | *** join/#maemo Pali (~pali@Maemo/community/contributor/Pali) |
| 15:48.25 | *** join/#maemo dafox (~dafox@188.207.67.251) |
| 15:57.02 | *** join/#maemo jskarvad (~jskarvad@ip4-83-240-109-95.cust.nbox.cz) |
| 15:57.02 | *** join/#maemo jskarvad (~jskarvad@redhat/jskarvad) |
| 16:09.23 | *** join/#maemo cyteen (~cyteen@47.143.199.146.dyn.plus.net) |
| 16:09.27 | *** join/#maemo florian_ (~fuchs@p5DE3C56A.dip0.t-ipconnect.de) |
| 16:38.45 | *** join/#maemo cyteen (~cyteen@47.143.199.146.dyn.plus.net) |
| 17:31.18 | *** join/#maemo drcode (~drcode@5.29.192.15) |
| 17:40.19 | *** join/#maemo Kabouik_ (~kabouik@129.242.224.21) |
| 17:54.06 | *** join/#maemo florian_ (~fuchs@x4d09489a.dyn.telefonica.de) |
| 17:57.04 | *** join/#maemo florian (~fuchs@x4d09489a.dyn.telefonica.de) |
| 17:57.04 | *** join/#maemo florian (~fuchs@Maemo/community/contributor/florian) |
| 18:03.09 | *** join/#maemo bit_lySLH2uSZHed (~deepbook@198.144.116.187) |
| 18:05.35 | *** part/#maemo bit_lySLH2uSZHed (~deepbook@198.144.116.187) |
| 18:06.56 | Pali | Great, systemd "not-a-bug" report got CVE! |
| 18:07.05 | Pali | https://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000082 |
| 18:07.37 | parazyd | ^_^ |
| 18:07.49 | Pali | "not-a-bug", "closed" and locked ticket: https://github.com/systemd/systemd/issues/6237 |
| 18:09.08 | L29Ah | :D |
| 18:09.44 | L29Ah | so it is fixed after all? |
| 18:09.55 | *** join/#maemo xy2_ (~xy2_@149.245.16.93.rev.sfr.net) |
| 18:10.51 | Pali | seems not fixed, just assigned CVE |
| 18:11.42 | Pali | so vulnerability would propagate to downstream customers/distributions as would be evaulated by security teams |
| 18:16.26 | KotCzarny | :> |
| 19:10.14 | *** join/#maemo Kabouik (~quassel@32.232.202.84.customer.cdi.no) |
| 19:21.52 | *** join/#maemo xy2_ (~xy2_@94.239.177.175) |
| 19:45.39 | *** join/#maemo ravelo (ravelo@neo900/community/supporter/ravelo) |
| 19:52.50 | *** join/#maemo dafox (~dafox@2a02:a448:c25a:1:7061:3b2a:37df:ded3) |
| 20:01.23 | *** join/#maemo pcfe (~pcfe@ip5b40471f.dynamic.kabel-deutschland.de) |
| 20:01.26 | *** join/#maemo pcfe (~pcfe@redhat/pcfe) |
| 20:51.29 | *** join/#maemo cyteen (~cyteen@47.143.199.146.dyn.plus.net) |
| 21:35.20 | *** join/#maemo louisdk (~louisdk@static-5-103-138-205.fibianet.dk) |
| 22:35.31 | *** join/#maemo Kabouik_ (~kabouik@32.232.202.84.customer.cdi.no) |
| 22:46.57 | DocScrutinizer05 | Pali: (CVE) https://botbot.me/freenode/devuan/2017-07-04/?msg=88110981&page=1 |
| 22:47.14 | DocScrutinizer05 | could say "I knew it" |
| 22:49.54 | Pali | more interesting part, that CVE was assigned by Red Hat Security |
| 22:50.15 | DocScrutinizer05 | CVE >>systemd v233 and earlier fails to safely parse usernames starting with a numeric digit<< is incorrect |
| 22:50.26 | DocScrutinizer05 | LOL |
| 22:51.01 | DocScrutinizer05 | so that's an even more evil spin? create an incorrect CVE just to close it as NOTABUG as well then? |
| 22:52.06 | Pali | technically CVE description is correct. systemd does not parse usernames with with digit correctly |
| 22:52.13 | Pali | that is truth |
| 22:52.20 | DocScrutinizer05 | fact is (according to explanation from the poettering horse's mouth): systemd DOES parse the parameter value, but detects it's malformed and thus ignores the whole parameter |
| 22:53.05 | Pali | from security point of view, this is unsafe parsing |
| 22:53.09 | DocScrutinizer05 | when user= parameter gets ignored, the default kicks in which is user=root |
| 22:53.44 | DocScrutinizer05 | yes, from security POV, but obviously not from Pezzering's POV |
| 22:53.53 | DocScrutinizer05 | poettering* |
| 22:54.16 | DocScrutinizer05 | he intentionally designed stuff that way |
| 22:54.52 | DocScrutinizer05 | though obviously when right side of = is incorrect MUST be another class of error than when left side of = is incorrect |
| 22:55.02 | Pali | looks like some rh sec team see it differentely as poettering and assigned for it cve even poettering disagreed... |
| 22:55.08 | DocScrutinizer05 | in systemd it's all the same |
| 22:55.37 | DocScrutinizer05 | please see https://botbot.me/freenode/devuan/2017-07-04/?msg=88110981&page=1 |
| 22:56.09 | Pali | systemd-sysusers... bah! |
| 22:56.16 | DocScrutinizer05 | this is a bug in concept/design |
| 22:56.25 | DocScrutinizer05 | indeed X-P |
| 22:57.55 | DocScrutinizer05 | >>when a parameter has syntactically invalid *value* then the whole parameter is considered as "unknown". This makes extreme NONsense here since when admin writes "user=" they _never_ expect that parameter gets silently ignored because of syntactically invalid value (user="666poettering") and thus the job gets ran as default root instead<< |
| 22:59.24 | Pali | I read it how it was designed, and... no comment |
| 23:00.49 | DocScrutinizer05 | actually that's a bug from OVERdoing sanity checks. A simple check if right side value of "user=" is an *existing user allowed for that job* would completely suffice |
| 23:01.21 | DocScrutinizer05 | let the system take care about users that start with a number, it's not systemd to judge if that's allowed username or not |
| 23:04.04 | DocScrutinizer05 | https://xkcd.com/1700/ <- systemd |
| 23:10.10 | *** join/#maemo merlin1991 (~merlin@Maemo/community/cssu/merlin1991) |
| 23:14.32 | DocScrutinizer05 | simply comment out that cruft bullshit syntactical check of user= *value* and everything fine |
| 23:23.00 | *** join/#maemo dafox (~dafox@2a02:a448:c25a:1:7061:3b2a:37df:ded3) |