[Bug 1313550] Re: ping does not work as a normal user on trusty tarball cloud images.

Scott Moser smoser at ubuntu.com
Mon Oct 27 15:03:13 UTC 2014


** Description changed:

  With trusty, /bin/ping relies on having extended attributes and kernel
  capabilities to gain the cap_net_raw+p capability. This allows removing
  the suid bit.
  
  However, the tarball cloud images do not preserve the extended
  attributes, and thus /bin/ping does not work on a system derived from
  them.
  
  Summary of problem per package:
   * lxc: ubuntu cloud template needs to extract
   * download template needs to extract with xattr flags
   * server side download creation tools need xattr flags
   * [unconfirmed] tarball caches need creation and extraction with xattr flags
   * tar: need the '--xattr' and '--acl' flags backported
   * maas: uec2roottgz needs to use xattr/acl flags
   * curtin: extraction needs to use xattr/acl flags.
   * cloud-image-build: needs to create -root.tar.gz with xattr/acl flags
  
- SRU curtin
- ==========
- 
- [Impact]
- 
- As the original bug report description mentions, curtin's extraction
- needs to use xattr/acl flags.
- 
- [Test Case]
- 
- To reproduce this bug, use curtin extraction without the extended file
- attributes.
- 
- [Regression Potential]
- 
- Since the patch for this bug fix *looks* to see if there are extended
- file attributes, it should work in the event that they are there or are
- not there or are.  More specifically, if tar cmd supports xattrs, curtin
- will return the required flags to extract them.  This lowers the
- probability of introducing a regression.
+ Related Bugs:
+  * bug 1382632: horizon insecure key file permissions
+  * bug 1386237: tar strange behavior with --acl
+  * bug 1313550: ping broken (xattrs lost in tar extraction)

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1313550

Title:
  ping does not work as a normal user on trusty tarball cloud images.

To manage notifications about this bug go to:
https://bugs.launchpad.net/curtin/+bug/1313550/+subscriptions



More information about the Ubuntu-server-bugs mailing list