group.of.nepali.translators team mailing list archive

[Kleber Sacilotto de Souza <kleber.souza@xxxxxxxxxxxxx>]

** Also affects: linux-signed (Ubuntu Xenial)
   Importance: Undecided
       Status: New

** Also affects: linux-signed-hwe (Ubuntu Xenial)
   Importance: Undecided
       Status: New

** Changed in: linux-signed-hwe (Ubuntu Xenial)
       Status: New => In Progress

** Changed in: linux-signed-hwe (Ubuntu Bionic)
       Status: Confirmed => In Progress

** Changed in: linux-signed (Ubuntu Xenial)
       Status: New => Invalid

-- 
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/1843327

Title:
  vmlinuz is world-readable

Status in linux-signed package in Ubuntu:
  Fix Released
Status in linux-signed-hwe package in Ubuntu:
  Fix Released
Status in linux-signed source package in Xenial:
  Invalid
Status in linux-signed-hwe source package in Xenial:
  In Progress
Status in linux-signed source package in Bionic:
  Fix Released
Status in linux-signed-hwe source package in Bionic:
  In Progress
Status in linux-signed source package in Disco:
  Fix Released
Status in linux-signed-hwe source package in Disco:
  Invalid

Bug description:
  [Impact]
  ppc64el vmlinuz is world-readable, possibly impacting security on that platform.

  [Test case]
  Verify vmlinuz is not world-readable after the fix.

  [Regression potential]
  File permissions may be wrong, possibly allowing attack.

  
  --------------------------------------------------------------------------

    ======================================================================
    FAIL: test_096_boot_symbols_unreadable (__main__.KernelSecurityTest)
    kernel addresses in /boot are not world readable
    ----------------------------------------------------------------------
    Traceback (most recent call last):
      File "./test-kernel-security.py", line 1438, in test_096_boot_symbols_unreadable
        self.assertEqual(os.stat(name).st_mode & mask, expected, '%s is world readable' % (name))
    AssertionError: /boot/vmlinux-4.15.0-62-generic is world readable
    
    ----------------------------------------------------------------------
    Ran 125 tests in 31.183s
    
    FAILED (failures=1)

  This currently affects ppc64el.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-signed/+bug/1843327/+subscriptions