From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on sa.local.altlinux.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00 autolearn=ham autolearn_force=no version=3.4.1 X-Virus-Scanned: amavisd-new at rosalinux.ru To: devel@lists.altlinux.org References: <20200417235446.GB31146@altlinux.org> From: Mikhail Novosyolov Message-ID: Date: Mon, 27 Apr 2020 11:30:47 +0300 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.7.0 MIME-Version: 1.0 In-Reply-To: <20200417235446.GB31146@altlinux.org> Content-Type: text/plain; charset=koi8-r Content-Language: ru-RU Content-Transfer-Encoding: quoted-printable Subject: Re: [devel] =?utf-8?q?=5F=5Flibc=5Fenable=5Fsecure_=D0=B2_openssl_lib?= =?utf-8?q?crypto?= X-BeenThere: devel@lists.altlinux.org X-Mailman-Version: 2.1.12 Precedence: list Reply-To: ALT Linux Team development discussions List-Id: ALT Linux Team development discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Apr 2020 08:31:08 -0000 Archived-At: List-Archive: List-Post: 18.04.2020 02:54, Dmitry V. Levin =D0=C9=DB=C5=D4: > On Sat, Apr 18, 2020 at 02:21:43AM +0300, Mikhail Novosyolov wrote: >> =F0=CF=D0=D2=CF=C2=CF=D7=C1=CC =D3=CF=C2=D2=C1=D4=D8 AppImage =CE=C1 =CF= =D3=CE=CF=D7=C5 =C2=C9=C2=CC=C9=CF=D4=C5=CB =C9=DA =E1=CC=D8=D4=C1. AppIm= age - =DC=D4=CF =D4=C1=CB=C1=D1 =DB=D4=D5=CB=C1, =C7=C4=C5 =D3=C2=C1=CE=C4= =CC=C5=CE=D9 =CE=C5=CF=C2=C8=CF=C4=C9=CD=D9=C5 =C4=CC=D1 =D2=C1=C2=CF=D4=D9= =D0=D2=CF=C7=D2=C1=CD=CD=D9 =C2=C9=C2=CC=C9=CF=D4=C5=CB=C9, =CE=CF libc = =C9=D3=D0=CF=CC=D8=DA=D5=C5=D4=D3=D1 =D3=C9=D3=D4=C5=CD=CE=C1=D1, =DE=D4=CF= =D0=CF=DA=D7=CF=CC=D1=C5=D4 =C9 =D0=D2=CF=C7=D2=C1=CD=CD=D5 =DA=C1=D0=D5= =D3=CB=C1=D4=D8 =D7 =D2=C1=DA=CE=D9=C8 =C4=C9=D3=D4=D2=C9=C2=D5=D4=C9=D7=C1= =C8, =C9 =D3=C9=D3=D4=C5=CD=CE=D9=C5 =D0=CC=C1=C7=C9=CE=D9 NSS =C9=D3=D0=CF= =CC=D8=DA=CF=D7=C1=D4=D8. =E4=CC=D1 =DC=D4=CF=CA =C3=C5=CC=C9 =D3=CF=C2=D2= =C1=CC =D7 =D3=C9=DA=C9=C6 =D0=C1=CB=C5=D4 linuxdeployqt. >> >> =EF=CB=C1=DA=C1=CC=CF=D3=D8, =DE=D4=CF libcrypto.so.10 (=D1 =C4=C5=CC=C1= =CC =CE=C1 =CF=D3=CE=CF=D7=C5 p8, =D4=CF =D6=C5 =D3=C1=CD=CF=C5 =C2=D5=C4= =C5=D4 =CF=D4=CE=CF=D3=C9=D4=D8=D3=D1 =C9 =CB =D3=C9=DA=C9=C6=D5) =C9=D3=D0= =CF=CC=D8=DA=D5=C5=D4 =D7=CE=D5=D4=D2=C5=CE=CE=C9=CA =D7 glibc =C9=CE=D4=C5= =D2=C6=C5=CA=D3 __libc_enable_secure, =CB=CF=D4=CF=D2=D9=CA =CE=C5 =D7=D9= =D7=C5=C4=C5=CE =CE=C1=D2=D5=D6=D5 =D7 =C4=D2=D5=C7=C9=C8 =C4=C9=D3=D4=D2= =C9=C2=D5=D4=C9=D7=C1=C8. > =F7=D3=A3-=D4=C1=CB=C9 __libc_enable_secure =D7=D9=D7=C5=C4=C5=CE =D5 =D7= =D3=C5=C8, =D0=CF=D4=CF=CD=D5 =DE=D4=CF =DC=D4=CF=D4 =D3=C9=CD=D7=CF=CC > =CF=D0=D2=C5=C4=C5=CC=A3=CE =D7 ld, =C1 =C9=D3=D0=CF=CC=D8=DA=D5=C5=D4=D3= =D1 =C5=DD=A3 =C9 =D7 libc. =EE=CF =D5 =CE=C1=D3 =DC=D4=CF=D4 =D3=C9=CD=D7= =CF=CC > =D7=C5=D2=D3=C9=CF=CE=C9=D2=CF=D7=C1=CE =CE=C5 =CB=C1=CB =D5 =D7=D3=C5=C8= =D7 GLIBC_PRIVATE, =C1 =D7 baseline version, =DE=D4=CF, > =CE=C1=D7=C5=D2=CE=CF=C5, =C2=D9=CC=CF =CE=C5 =D3=CF=D7=D3=C5=CD =D0=D2= =C1=D7=C9=CC=D8=CE=CF =D3=C4=C5=CC=C1=CE=CF, =CC=D5=DE=DB=C5 =C2=D9=CC=CF= =C2=D9 =D7=D9=C4=C5=CC=C9=D4=D8 =C4=CC=D1 > =DC=D4=CF=C7=CF =CF=D4=C4=C5=CC=D8=CE=D5=C0 =D7=C5=D2=D3=C9=C0, =CE=CF = =D0=CF=D4=CF=CD =D5=D6=C5 =D0=CF=DA=C4=CE=CF =C2=D9=CC=CF =DC=D4=CF =CD=C5= =CE=D1=D4=D8. > > =F5 =CE=C1=D3 =D7 libc =C5=D3=D4=D8 =C5=DD=A3 =CE=C5=D3=CB=CF=CC=D8=CB=CF= =D3=C9=CD=D7=CF=CC=CF=D7, =CB=CF=D4=CF=D2=D9=C5 =DB=C9=D2=CF=CB=CF =C9=D3= =D0=CF=CC=D8=DA=D5=C0=D4=D3=D1 > =CE=C1=DB=C9=CD=C9 =D0=C1=CB=C5=D4=C1=CD=C9, =CE=CF =CB=CF=D4=CF=D2=D9=C8= =D0=CF=CB=C1 =CE=C5=D4 =D7 =C4=D2=D5=C7=C9=C8 libc: > __strlcat_chk > __strlcpy_chk > strlcat > strlcpy > >> =FC=D4=CF =D3=C4=C5=CC=C1=CE=CF =D0=C1=D4=DE=C5=CD openssl-owl-alt-iss= etugid.patch: >>> --- openssl/crypto/uid.c >>> +++ openssl/crypto/uid.c >>> @@ -77,8 +77,12 @@ int OPENSSL_issetugid(void) >>> =9A# include OPENSSL_UNISTD >>> =9A# include >>> =9A >>> +extern int __libc_enable_secure; >>> + >>> =9Aint OPENSSL_issetugid(void) >>> =9A{ >>> +=9A=9A=9A if (__libc_enable_secure) >>> +=9A=9A=9A=9A=9A=9A=9A return 1; >>> =9A=9A=9A=9A if (getuid() !=3D geteuid()) >>> =9A=9A=9A=9A=9A=9A=9A=9A return 1; >>> =9A=9A=9A=9A if (getgid() !=3D getegid()) >> =F7 =D3=D7=D1=DA=C9 =D3 =DC=D4=C9=CD =D7=CF=DA=CE=C9=CB =D7=CF=D0=D2=CF= =D3: =D7 =E1=CC=D8=D4=C5 glibc =DA=C1=D0=C1=D4=DE=C5=CE, =DE=D4=CF=C2=D9 = =D7=D9=D7=C5=D3=D4=C9 =DC=D4=D5 =D7=CE=D5=D4=D2=C5=CE=CE=C0=C0 =C6=D5=CE=CB= =C3=C9=C0? > =E4=C1, =CB=CF=CD=CD=C9=D4 730399f767758a200256d7eb20f74d2310ab973b. > >> =E9=D3=D0=CF=CC=D8=DA=D5=C5=D4=D3=D1 =CC=C9 =CF=CE=C1 =D7 =CB=C1=CB=C9= =C8-=CC=C9=C2=CF =C5=DD=C5 =D7=CE=C5=DB=CE=C9=C8 =D0=CF=D4=D2=C5=C2=C9=D4= =C5=CC=D1=C8? > =EB=C1=CB =CD=C9=CE=C9=CD=D5=CD =C5=DD=A3 =D7 libtinfo. =F5 =CD=C5=CE=D1 =D0=CF=CC=D5=DE=C9=CC=CF=D3=D8 =D3=CF=C2=D2=C1=D4=D8 =D2= =C1=C2=CF=D4=C1=C0=DD=D5=C0 =CE=C1 =C4=D2=D5=C7=C9=C8 =C4=C9=D3=D4=D2=C9=C2= =D5=D4=C9=D7=C1=C8 AppImage-=D0=CF=C4=CF=C2=CE=D5=C0 =D3=D4=D2=D5=CB=D4=D5= =D2=D5 =CE=C1 =CF=D3=CE=CF=D7=C5 =C2=C9=C2=CC=C9=CF=D4=C5=CB =C9=DA p8, =D7= =D4.=DE. Qt5 =CF=D4=D4=D5=C4=C1, =D0=D5=D4=C5=CD =D3=C2=CF=D2=CB=C9 open= ssl =C2=C5=DA =D0=C1=D4=DE=C1 openssl-owl-alt-issetugid.patch. =EE=CF =CE= =C1=CC=C9=DE=C9=C5 =D4=C1=CB=C9=C8 =CE=C0=C1=CE=D3=CF=D7 =D3=D4=C1=CC=CF = =CE=C5=D0=D2=C9=D1=D4=CE=CF=CA =CE=C5=CF=D6=C9=C4=C1=CE=CE=CF=D3=D4=D8=C0= , =C9 =D7=CF=D4 =D0=CF=DE=C5=CD=D5. =EE=C1=DE=CE=C5=CD =D3 "=CF=C2=D9=DE=CE=D9=C8" =D0=CF=CC=D8=DA=CF=D7=C1=D4= =C5=CC=C5=CA. =F3=D2=C5=C4=C9 =CE=C9=C8 =C4=CF=D3=D4=C1=D4=CF=DE=CE=CF =D7= =CF=D3=D4=D2=C5=C2=CF=D7=C1=CE=CF =C9=CD=C5=D4=D8 =D7=CF=DA=CD=CF=D6=CE=CF= =D3=D4=D8 =DA=C1=D0=D5=D3=CB=C1=D4=D8 AppImage =C9 =C4=D2=D5=C7=C9=C5 =D3= =D4=CF=D2=CF=CE=CE=C9=C5 =C2=C9=CE=C1=D2=CE=D9=C5 =D3=C2=CF=D2=CB=C9 =D7 = =C3=C5=CC=D1=C8 =D5=D0=D2=CF=DD=C5=CE=C9=D1 =D6=C9=DA=CE=C9 =C9 =D2=C5=DB= =C5=CE=C9=D1 =D0=CF=D7=D3=C5=C4=CE=C5=D7=CE=D9=C8 =DA=C1=C4=C1=DE. =EE=CF= =D7=D2=CF=C4=C5 =C2=D9 =CF=CE=C9 =CF=D3=CF=C2=CF =CE=C5 =D3=D4=D2=C1=C4=C1= =C0=D4 =C9 =CD=CF=C7=D5=D4 =C9=C8 =DA=C1=D0=D5=D3=CB=C1=D4=D8 (=CE=D5, =CB= =D2=CF=CD=C5 =DA=C1=C2=CC=CF=CB=C9=D2=CF=D7=C1=CE=CE=CF=C7=CF =C9=DA =CB=CF= =D2=CF=C2=CB=C9 fuse, =DE=D4=CF =CD=C5=DB=C1=C5=D4 =DA=C1=D0=D5=D3=D4=C9=D4= =D8 AppImage, =CE=CF, =D3 =D4=CF=DE=CB=C9 =DA=D2=C5=CE=C9=D1 =C1=C4=CD=C9= =CE=C9=D3=D4=D2=C1=D4=CF=D2=C1 =CB=CF=D2=D0=CF=D2=C1=D4=C9=D7=CE=D9=C8 =D2= =C1=C2=CF=DE=C9=C8 =D3=D4=C1=CE=C3=C9=CA, =CD=CE=C5 =D4=C1=CB=C1=D1 =C2=CC= =CF=CB=C9=D2=CF=D7=CB=C1 =C9=DA =CB=CF=D2=CF=C2=CB=C9 =D3=CB=CF=D2=C5=C5 = =CE=D2=C1=D7=C9=D4=D3=D1, =DE=C5=CD =CE=C5 =CE=D2=C1=D7=C9=D4=D3=D1). =E2=CF=CC=D8=DB=C5 =D7=D3=C5=C7=CF =C9=CE=D4=C5=D2=C5=D3=D5=C5=D4 =D7=CF=D0= =D2=CF=D3 =CF=D4=C5=DE=C5=D3=D4=D7=C5=CE=CE=CF=CA =C2=CC=CF=C2=D1=D4=C9=CE= =CB=C9, =D4.=C5. =D2=C1=DA=CC=C9=DE=CE=D9=C8 =D0=D2=CF=C7=D2=C1=CD=CD=CE=D9= =C8 =C9=DA=C4=C5=CC=C9=CA, =D7=D9=D0=D5=D3=CB=C1=C5=CD=D9=C8 =C9 =C9=D3=D0= =CF=CC=D8=DA=D5=C5=CD=D9=C8 =D7 =D2=C1=CD=CB=C1=C8 =C9=CD=D0=CF=D2=D4=CF=DA= =C1=CD=C5=DD=C5=CE=C9=D1. =E2=CF=CC=D8=DB=C9=CE=D3=D4=D7=CF =C9=C8 =D2=C1= =DA=D2=C1=C2=CF=D4=DE=C9=CB=CF=D7 =CE=C5 =CF=DE=C5=CE=D8 =C8=CF=D2=CF=DB=CF= =D5=CD=C5=C0=D4 =D5=D0=C1=CB=CF=D7=D9=D7=C1=D4=D8 =D0=D2=CF=C7=D2=C1=CD=CD= =D9 =D0=CF=C4 =EC=C9=CE=D5=CB=D3, =CB=C1=CB =D3 =D4=CF=DE=CB=C9 =DA=D2=C5= =CE=C9=D1 =D3=C2=CF=D2=CB=C9 =C9=D3=D0=CF=CC=CE=D1=C5=CD=D9=C8 =C6=C1=CA=CC= =CF=D7, =D4=C1=CB =C9 =D3 =D4=CF=DE=CB=C9 =DA=D2=C5=CE=C9=D1 =D3=CF=DA=C4= =C1=CE=C9=D1 RPM-=D0=C1=CB=C5=D4=CF=D7 =C9=CC=C9 =C9=CE=D9=C8 =C6=CF=D2=CD= =C4=C9=D3=D4=D2=C9=C2=D5=C3=C9=C9. =F7 =D2=C5=DA=D5=CC=D8=D4=C1=D4=C5 =CE= =C5=CB=CF=D4=CF=D2=D9=C5 =C9=DA =CE=C9=C8 =D0=CF=C4=C4=C5=D2=D6=C9=D7=C1=C0= =D4 =D4=CF=CC=D8=CB=CF 1-2 =CF=D4=C5=DE=C5=D3=D4=D7=C5=CE=CE=D9=C8 =C4=C9= =D3=D4=D2=C9=C2=D5=D4=C9=D7=C1, =D4=C5=D2=D1=D1 =DE=C1=D3=D4=D8 =D0=CF=CC= =D8=DA=CF=D7=C1=D4=C5=CC=C5=CA, =CE=C5=CB=CF=D4=CF=D2=D9=C5 =D0=D9=D4=C1=C0= =D4=D3=D1 =D3=CF=C2=C9=D2=C1=D4=D8 =D0=CF =D0=C1=CB=C5=D4=D5 =D0=CF=C4 =CB= =C1=D6=C4=D9=CA =C4=C9=D3=D4=D2=C9=C2=D5=D4=C9=D7, =D4=D2=C1=D4=D1 =CE=C1= =DC=D4=CF =CF=C7=D2=CF=CD=CE=CF=C5 =CB=CF=CC=C9=DE=C5=D3=D4=D7=CF =D2=C5= =D3=D5=D2=D3=CF=D7. =FC=D4=CF =D0=CC=CF=C8=CF =C9 =C4=CC=D1 =D2=C1=DA=D2=C1= =C2=CF=D4=DE=C9=CB=CF=D7 =F0=EF, =C9 =C4=CC=D1 =D2=C1=DA=D2=C1=C2=CF=D4=DE= =C9=CB=CF=D7 =C4=C9=D3=D4=D2=C9=C2=D5=D4=C9=D7=CF=D7, =CB=CF=D4=CF=D2=D9=C5= =D7=D9=CE=D5=D6=C4=C5=CE=D9 =C9=CD=C5=D4=D8 =D3 =CE=C9=CD =C4=C5=CC=CF. = =E5=C4=C9=CE=D3=D4=D7=C5=CE=CE=D9=CD =D7=D9=C8=CF=C4=CF=CD =C9=DA =D3=C9=D4= =D5=C1=C3=C9=C9 =D1 =D7=C9=D6=D5 =D0=CF=D0=D9=D4=CB=C9 =D2=C5=CB=CF=CD=C5= =CE=C4=CF=D7=C1=D4=D8 =D2=C1=DA=D2=C1=C2=CF=D4=DE=C9=CB=C1=CD =D3=CF=C2=C9= =D2=C1=D4=D8 =D5=CE=C9=D7=C5=D2=D3=C1=CC=D8=CE=D9=C5 =C9=D3=D0=CF=CC=CE=D1= =C5=CD=D9=C5 =C6=C1=CA=CC=D9 =C9=CC=C9 =D0=C1=CB=C5=D4=D9 =D3 =C7=D2=C1=CD= =CF=D4=CE=CF =D3=C2=C1=CE=C4=CC=C5=CE=CE=D9=CD=C9 =C2=C9=C2=CC=C9=CF=D4=C5= =CB=C1=CD=C9 =C9 =C7=D2=C1=CD=CF=D4=CE=CF =D0=D2=CF=D0=C9=D3=C1=CE=CE=D9=C5= =DA=C1=D7=C9=D3=C9=CD=CF=D3=D4=C9 =D7 RPM, =CE=C1=D0=D2=C9=CD=C5=D2, =CE= =C5 libgnomekeyring, a libgnome-keyring.so.0()(64bit). =E2=D9=CC=C1 =CD=D9= =D3=CC=D8, =DE=D4=CF =CD=CE=CF=C7=C9=CD =C2=D5=C4=C5=D4 =C7=CF=D2=C1=DA=C4= =CF =D0=D2=CF=DD=C5 =CE=C5 =C9=DA=CF=C2=D2=C5=D4=C1=D4=D8 =D3=CC=CF=D6=CE=D5=C0 =D3=C9=D3=D4=C5=CD=D5= =D3=C2=CF=D2=CB=C9 =D3 =DE=C1=D3=D4=C9=DE=CE=CF=CA =D3=D4=C1=D4=C9=DE=C5= =D3=CB=CF=CA =CC=C9=CE=CB=CF=D7=CB=CF=CA, =C1 =D3=CF=C2=C9=D2=C1=D4=D8 =D3= =D3=C9=D3=D4=C5=CD=CE=D9=CD=C9 =C2=C9=C2=CC=C9=CF=D4=C5=CB=C1=CD=C9 =D7 = =CB=C1=CB=CF=CA-=CE=C9=C2=D5=C4=D8 =EF=F3, =C1 =DA=C1=D4=C5=CD =D5=D0=C1=CB= =CF=D7=D9=D7=C1=D4=D8 AppImage, =DC=D4=CF =CF=DE=C5=CE=D8 =D0=D2=CF=D3=D4= =CF. AppImage-=D0=CF=C4=CF=C2=CE=D5=C0 =D3=D4=D2=D5=CB=D4=D5=D2=D5 =CD=CF= =D6=CE=CF =D0=CF=CC=CF=D6=C9=D4=D8 =D7 RPM-=D0=C1=CB=C5=D4, =DA=CE=C1=D1 = =D0=D2=CF AutoReq, AutoProv =C9 =C4=D2. =E9 =D7=CF=D4 =DA=C4=C5=D3=D8 =D7= =D3=D4=C1=C5=D4 =D7=CF=D0=D2=CF=D3, =CE=C1=D3=CB=CF=CC=D8=CB=CF =D0=CF=CD= =C5=DB=C1=C0=D4 =D4=C1=CB=C9=C5 =C6=CF=CB=D5=D3=D9. =F3=CF=C2=C5=D2=D5=D4= =D7 =E1=CC=D8=D4=C5 - =CE=C5 =DA=C1=D2=C1=C2=CF=D4=C1=C5=D4 =D7 =C4=D2=D5= =C7=C9=C8 =C4=C9=D3=D4=D2=C9=C2=D5=D4=C9=D7=C1=C8. =F4=CF=D4 =D6=C5 opens= sl =CE=C1=D3=D4=CF=CC=D8=CB=CF =DE=C1=D3=D4=CF =C9=D3=D0=CF=CC=D8=DA=D5=C5= =D4=D3=D1 =C9 =CF=C4=CE=CF=DA=CE=C1=DE=CE=CF =C2=D5=C4=C5=D4 =D3=C2=C1=CE= =C4=CC=C9=D7=C1=D4=D8=D3=D1, =DE=D4=CF =E1=CC=D8=D4 =CD=CF=D6=CE=CF =D3=D2= =C1=DA=D5 =CE=C5 =D2=C5=CB=CF=CD=C5=CE=C4=CF=D7=C1=D4=D8 =C4=CC=D1 =D3=C2= =CF=D2=CB=C9 AppImage-=D0=CF=C4=CF=C2=CE=D9=C8 =D0=C1=CB=C5=D4=CF=D7. =E1= =D7=CF=D4 =C5=D3=CC=C9 =D3=CF=C2=D2=C1=D4=D8 =F0=EF =CE=C1 =C4=D2=D5=C7=CF= =CD =C4=C9=D3=D4=D2=C9=C2=D5=D4=C9=D7=C5, =D4=CF =C5=D3=D4=D8 =CE=C5=C2=CF= =CC=D8=DB=C1=D1 =D7=C5=D2=CF=D1=D4=CE=CF=D3=D4=D8 =D7=CF=DA=CE=C9=CB=CE=CF= =D7=C5=CE=C9=D1 =D0=D2=CF=C2=CC=C5=CD =D7 =E1=CC=D8=D4=C5. =E4=D5=CD=C1=C0= , =DE=D4=CF =CE=D5=D6=CE=CF =D3=C9=CC=D8=CE=CF =D0=CF=D3=D4=C1=D2=C1=D4=D8= =D3=D1, =DE=D4=CF=C2=D9 =C9=C8 =D0=CF=CA=CD=C1=D4=D8, =D4.=CB. =D7=CE=D5=D4= =D2=C5=CE=CE=C9=CA API __libc_enable_secure =DA=C1=D7=C5=C4=CF=CD=CF =CE=C5= =D3=D4=CF=C9=D4 =C9=D3=D0=CF=CC=D8=DA=CF=D7=C1=D4=D8, =CE=CF, =CD=CF=D6=C5= =D4 =C2=D9=D4=D8, =C5=D3=D4=D8 =C4=D2=D5=C7=C9=C5 =D0=CF=C4=CF=C2=CE=D9=C5= =CE=C0=C1=CE=D3=D9.