canonical-ubuntu-qa team mailing list archive

Thread
Date
[Bug 2023564] Re: creat09 in ubuntu_ltp_syscalls, cve-2018-13405 in ubuntu_ltp_cves failed on XFS (Setgid bit is set)

To: canonical-ubuntu-qa@xxxxxxxxxxxxxxxxxxx
From: Joseph Salisbury <2023564@xxxxxxxxxxxxxxxxxx>
Date: Tue, 18 Jul 2023 18:05:57 -0000
Reply-to: Bug 2023564 <2023564@xxxxxxxxxxxxxxxxxx>
Sender: noreply@xxxxxxxxxxxxx
Seen on f/oracle with kernel 5.4.0-1106.115

-- 
You received this bug notification because you are a member of Canonical
Platform QA Team, which is subscribed to ubuntu-kernel-tests.
https://bugs.launchpad.net/bugs/2023564

Title:
  creat09 in ubuntu_ltp_syscalls, cve-2018-13405 in ubuntu_ltp_cves
  failed on XFS (Setgid bit is set)

Status in ubuntu-kernel-tests:
  New

Bug description:
  When testing the LTP update (LTP 20230516, commit 3ebc2dfa85c) on
  Oracle cloud.

  The creat09 test is now failing on XFS with J-oracle 5.15.0-1037.43:
  tst_test.c:1634: TINFO: === Testing on xfs ===
  tst_test.c:1093: TINFO: Formatting /dev/loop5 with xfs opts='' extra opts=''
  creat09.c:73: TINFO: User nobody: uid = 65534, gid = 65534
  creat09.c:75: TINFO: Found unused GID 11: SUCCESS (0)
  creat09.c:120: TINFO: File created with umask(0)
  creat09.c:106: TPASS: mntpoint/testdir/creat.tmp: Owned by correct group
  creat09.c:112: TPASS: mntpoint/testdir/creat.tmp: Setgid bit not set
  creat09.c:106: TPASS: mntpoint/testdir/open.tmp: Owned by correct group
  creat09.c:112: TPASS: mntpoint/testdir/open.tmp: Setgid bit not set
  creat09.c:120: TINFO: File created with umask(S_IXGRP)
  creat09.c:106: TPASS: mntpoint/testdir/creat.tmp: Owned by correct group
  creat09.c:110: TFAIL: mntpoint/testdir/creat.tmp: Setgid bit is set
  creat09.c:106: TPASS: mntpoint/testdir/open.tmp: Owned by correct group
  creat09.c:110: TFAIL: mntpoint/testdir/open.tmp: Setgid bit is set

  Complete test log:
  12:31:41 INFO |     START    ubuntu_ltp_syscalls.creat09    ubuntu_ltp_syscalls.creat09    timestamp=1686573101    timeout=900    localtime=Jun 12 12:31:41    
  12:31:41 DEBUG| Persistent state client._record_indent now set to 2
  12:31:41 DEBUG| Persistent state client.unexpected_reboot now set to ('ubuntu_ltp_syscalls.creat09', 'ubuntu_ltp_syscalls.creat09')
  12:31:41 DEBUG| Waiting for pid 54905 for 900 seconds
  12:31:41 WARNI| System python is too old, crash handling disabled
  12:31:42 ERROR| Exception escaping from test:
  Traceback (most recent call last):
    File "/home/ubuntu/autotest/client/shared/test.py", line 411, in _exec
      _call_test_function(self.execute, *p_args, **p_dargs)
    File "/home/ubuntu/autotest/client/shared/test.py", line 823, in _call_test_function
      return func(*args, **dargs)
    File "/home/ubuntu/autotest/client/shared/test.py", line 291, in execute
      postprocess_profiled_run, args, dargs)
    File "/home/ubuntu/autotest/client/shared/test.py", line 212, in _call_run_once
      self.run_once(*args, **dargs)
    File "/home/ubuntu/autotest/client/tests/ubuntu_ltp_syscalls/ubuntu_ltp_syscalls.py", line 151, in run_once
      print(utils.system_output(cmd, verbose=False))
    File "/home/ubuntu/autotest/client/shared/utils.py", line 1271, in system_output
      verbose=verbose, args=args).stdout
    File "/home/ubuntu/autotest/client/shared/utils.py", line 918, in run
      "Command returned non-zero exit status")
  CmdError: Command  failed, rc=1, Command returned non-zero exit status
  * Command: 
      /opt/ltp/runltp -f /tmp/target -q -C /dev/null -l /dev/null -T /dev/null
  Exit status: 1
  Duration: 0.963459014893

  stdout:
  Checking for required user/group ids

  'root' user id and group found.
  'nobody' user id and group found.
  'bin' user id and group found.
  'daemon' user id and group found.
  Users group found.
  Sys group found.
  Required users/groups exist.
  no big block device was specified on commandline.
  Tests which require a big block device are disabled.
  You can specify it with option -z
  INFO: Test start time: Mon Jun 12 12:31:41 UTC 2023
  COMMAND:    /opt/ltp/bin/ltp-pan -q  -e -S   -a 54911     -n 54911  -f /tmp/ltp-sdmGheWr6o/alltests -l /dev/null  -C /dev/null -T /dev/null
  LOG File: /dev/null
  FAILED COMMAND File: /dev/null
  TCONF COMMAND File: /dev/null
  Running tests.......
  tst_device.c:96: TINFO: Found free device 5 '/dev/loop5'
  tst_test.c:1558: TINFO: Timeout per run is 0h 00m 30s
  tst_supported_fs_types.c:89: TINFO: Kernel supports ext2
  tst_supported_fs_types.c:54: TINFO: mkfs.ext2 does exist
  tst_supported_fs_types.c:89: TINFO: Kernel supports ext3
  tst_supported_fs_types.c:54: TINFO: mkfs.ext3 does exist
  tst_supported_fs_types.c:89: TINFO: Kernel supports ext4
  tst_supported_fs_types.c:54: TINFO: mkfs.ext4 does exist
  tst_supported_fs_types.c:89: TINFO: Kernel supports xfs
  tst_supported_fs_types.c:54: TINFO: mkfs.xfs does exist
  tst_supported_fs_types.c:89: TINFO: Kernel supports btrfs
  tst_supported_fs_types.c:54: TINFO: mkfs.btrfs does exist
  tst_supported_fs_types.c:156: TINFO: Skipping vfat as requested by the test
  tst_supported_fs_types.c:156: TINFO: Skipping exfat as requested by the test
  tst_supported_fs_types.c:89: TINFO: Kernel supports tmpfs
  tst_supported_fs_types.c:41: TINFO: mkfs is not needed for tmpfs
  tst_test.c:1634: TINFO: === Testing on ext2 ===
  tst_test.c:1093: TINFO: Formatting /dev/loop5 with ext2 opts='' extra opts=''
  mke2fs 1.46.5 (30-Dec-2021)
  creat09.c:73: TINFO: User nobody: uid = 65534, gid = 65534
  creat09.c:75: TINFO: Found unused GID 11: SUCCESS (0)
  creat09.c:120: TINFO: File created with umask(0)
  creat09.c:106: TPASS: mntpoint/testdir/creat.tmp: Owned by correct group
  creat09.c:112: TPASS: mntpoint/testdir/creat.tmp: Setgid bit not set
  creat09.c:106: TPASS: mntpoint/testdir/open.tmp: Owned by correct group
  creat09.c:112: TPASS: mntpoint/testdir/open.tmp: Setgid bit not set
  creat09.c:120: TINFO: File created with umask(S_IXGRP)
  creat09.c:106: TPASS: mntpoint/testdir/creat.tmp: Owned by correct group
  creat09.c:112: TPASS: mntpoint/testdir/creat.tmp: Setgid bit not set
  creat09.c:106: TPASS: mntpoint/testdir/open.tmp: Owned by correct group
  creat09.c:112: TPASS: mntpoint/testdir/open.tmp: Setgid bit not set
  tst_test.c:1634: TINFO: === Testing on ext3 ===
  tst_test.c:1093: TINFO: Formatting /dev/loop5 with ext3 opts='' extra opts=''
  mke2fs 1.46.5 (30-Dec-2021)
  creat09.c:73: TINFO: User nobody: uid = 65534, gid = 65534
  creat09.c:75: TINFO: Found unused GID 11: SUCCESS (0)
  creat09.c:120: TINFO: File created with umask(0)
  creat09.c:106: TPASS: mntpoint/testdir/creat.tmp: Owned by correct group
  creat09.c:112: TPASS: mntpoint/testdir/creat.tmp: Setgid bit not set
  creat09.c:106: TPASS: mntpoint/testdir/open.tmp: Owned by correct group
  creat09.c:112: TPASS: mntpoint/testdir/open.tmp: Setgid bit not set
  creat09.c:120: TINFO: File created with umask(S_IXGRP)
  creat09.c:106: TPASS: mntpoint/testdir/creat.tmp: Owned by correct group
  creat09.c:112: TPASS: mntpoint/testdir/creat.tmp: Setgid bit not set
  creat09.c:106: TPASS: mntpoint/testdir/open.tmp: Owned by correct group
  creat09.c:112: TPASS: mntpoint/testdir/open.tmp: Setgid bit not set
  tst_test.c:1634: TINFO: === Testing on ext4 ===
  tst_test.c:1093: TINFO: Formatting /dev/loop5 with ext4 opts='' extra opts=''
  mke2fs 1.46.5 (30-Dec-2021)
  creat09.c:73: TINFO: User nobody: uid = 65534, gid = 65534
  creat09.c:75: TINFO: Found unused GID 11: SUCCESS (0)
  creat09.c:120: TINFO: File created with umask(0)
  creat09.c:106: TPASS: mntpoint/testdir/creat.tmp: Owned by correct group
  creat09.c:112: TPASS: mntpoint/testdir/creat.tmp: Setgid bit not set
  creat09.c:106: TPASS: mntpoint/testdir/open.tmp: Owned by correct group
  creat09.c:112: TPASS: mntpoint/testdir/open.tmp: Setgid bit not set
  creat09.c:120: TINFO: File created with umask(S_IXGRP)
  creat09.c:106: TPASS: mntpoint/testdir/creat.tmp: Owned by correct group
  creat09.c:112: TPASS: mntpoint/testdir/creat.tmp: Setgid bit not set
  creat09.c:106: TPASS: mntpoint/testdir/open.tmp: Owned by correct group
  creat09.c:112: TPASS: mntpoint/testdir/open.tmp: Setgid bit not set
  tst_test.c:1634: TINFO: === Testing on xfs ===
  tst_test.c:1093: TINFO: Formatting /dev/loop5 with xfs opts='' extra opts=''
  creat09.c:73: TINFO: User nobody: uid = 65534, gid = 65534
  creat09.c:75: TINFO: Found unused GID 11: SUCCESS (0)
  creat09.c:120: TINFO: File created with umask(0)
  creat09.c:106: TPASS: mntpoint/testdir/creat.tmp: Owned by correct group
  creat09.c:112: TPASS: mntpoint/testdir/creat.tmp: Setgid bit not set
  creat09.c:106: TPASS: mntpoint/testdir/open.tmp: Owned by correct group
  creat09.c:112: TPASS: mntpoint/testdir/open.tmp: Setgid bit not set
  creat09.c:120: TINFO: File created with umask(S_IXGRP)
  creat09.c:106: TPASS: mntpoint/testdir/creat.tmp: Owned by correct group
  creat09.c:110: TFAIL: mntpoint/testdir/creat.tmp: Setgid bit is set
  creat09.c:106: TPASS: mntpoint/testdir/open.tmp: Owned by correct group
  creat09.c:110: TFAIL: mntpoint/testdir/open.tmp: Setgid bit is set
  tst_test.c:1634: TINFO: === Testing on btrfs ===
  tst_test.c:1093: TINFO: Formatting /dev/loop5 with btrfs opts='' extra opts=''
  creat09.c:73: TINFO: User nobody: uid = 65534, gid = 65534
  creat09.c:75: TINFO: Found unused GID 11: SUCCESS (0)
  creat09.c:120: TINFO: File created with umask(0)
  creat09.c:106: TPASS: mntpoint/testdir/creat.tmp: Owned by correct group
  creat09.c:112: TPASS: mntpoint/testdir/creat.tmp: Setgid bit not set
  creat09.c:106: TPASS: mntpoint/testdir/open.tmp: Owned by correct group
  creat09.c:112: TPASS: mntpoint/testdir/open.tmp: Setgid bit not set
  creat09.c:120: TINFO: File created with umask(S_IXGRP)
  creat09.c:106: TPASS: mntpoint/testdir/creat.tmp: Owned by correct group
  creat09.c:112: TPASS: mntpoint/testdir/creat.tmp: Setgid bit not set
  creat09.c:106: TPASS: mntpoint/testdir/open.tmp: Owned by correct group
  creat09.c:112: TPASS: mntpoint/testdir/open.tmp: Setgid bit not set
  tst_test.c:1634: TINFO: === Testing on tmpfs ===
  tst_test.c:1093: TINFO: Skipping mkfs for TMPFS filesystem
  tst_test.c:1074: TINFO: Limiting tmpfs size to 32MB
  creat09.c:73: TINFO: User nobody: uid = 65534, gid = 65534
  creat09.c:75: TINFO: Found unused GID 11: SUCCESS (0)
  creat09.c:120: TINFO: File created with umask(0)
  creat09.c:106: TPASS: mntpoint/testdir/creat.tmp: Owned by correct group
  creat09.c:112: TPASS: mntpoint/testdir/creat.tmp: Setgid bit not set
  creat09.c:106: TPASS: mntpoint/testdir/open.tmp: Owned by correct group
  creat09.c:112: TPASS: mntpoint/testdir/open.tmp: Setgid bit not set
  creat09.c:120: TINFO: File created with umask(S_IXGRP)
  creat09.c:106: TPASS: mntpoint/testdir/creat.tmp: Owned by correct group
  creat09.c:112: TPASS: mntpoint/testdir/creat.tmp: Setgid bit not set
  creat09.c:106: TPASS: mntpoint/testdir/open.tmp: Owned by correct group
  creat09.c:112: TPASS: mntpoint/testdir/open.tmp: Setgid bit not set

  HINT: You _MAY_ be missing kernel fixes:

  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0fa3ecd87848
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=01ea173e103e
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1639a49ccdce
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=426b4ca2d6a5

  HINT: You _MAY_ be vulnerable to CVE(s):

  https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13405
  https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4037

  Summary:
  passed   46
  failed   2
  broken   0
  skipped  0
  warnings 0
  INFO: ltp-pan reported some tests FAIL
  LTP Version: 20230516
  INFO: Test end time: Mon Jun 12 12:31:42 UTC 2023

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-kernel-tests/+bug/2023564/+subscriptions
References

[Bug 2023564] [NEW] creat09 in ubuntu_ltp_syscalls failed with J-oracle on XFS (Setgid bit is set)
From: Po-Hsu Lin, 2023-06-12