Comments

404 Comments

@lslebodn - well I find it difficult to believe that the problems weren't the result of your update. You need to investigate further. Immediately after applying your update I stopped getting a ssh prompt to my remote machine. It would just time out. I had a friend reboot the machine several times to no avail. Immediately after removing your updates: dnf downgrade sssd*; followed by 1 reboot the problem immediately disappeared. That isn't just a coincidence. I'm not in a situation to play around with the remote server. I'm travelling internationally and am dependant on being about to access the remote machine via SSH. Apparently the above testers don't use ssh or sudo.

karma

After applying this update I could no longer login to my system via ssh. Also, I started getting errors with sudo. I've backed out via: dnf downgrade sssd* and things are once again working properly. This change should not be pushed to stable.

karma

Thanks for taking the time to give clamav much needed attention.

Test Case ClamAV

Thanks... that worked... here is what I had previously to the change...

[Unit]
Description = clamd scanner (%i) daemon
After = syslog.target nss-lookup.target network.target

[Service]
Type = simple
ExecStart = /usr/sbin/clamd -c /etc/clamd.d/%i.conf --foreground=yes
Restart = on-failure
PrivateTmp = true

I did some quick reading and understand that foreground and forking are contradictory - but shouldn't we be keeping PrivateTmp?

My clamd@scan.service looks like this: .include /lib/systemd/system/clamd@.service

[Unit] Description = Generic clamav scanner daemon

[Install] WantedBy = multi-user.target

So, I modified clamd@.service to look like this: [Unit] Description = clamd scanner (%i) daemon After = syslog.target nss-lookup.target network.target

[Service] Type = forking ExecStart = binary --daemonize=yes Restart = on-failure

Now I receive the following message:

start clamd@scan.service Failed to start clamd@scan.service: Unit clamd@scan.service is not loaded properly: Exec format error. See system logs and 'systemctl status clamd@scan.service' for details.

systemctl status clamd@scan.service ● clamd@scan.service - clamd scanner (scan) daemon Loaded: error (Reason: Exec format error) Active: failed (Result: exit-code) since Wed 2018-01-17 06:10:01 PST; 12min ago Main PID: 7846 (code=exited, status=0/SUCCESS)

Jan 17 06:10:01 charon systemd[1]: Stopped Generic clamav scanner daemon. Jan 17 06:10:01 charon systemd[1]: clamd@scan.service: Start request repeated too quickly. Jan 17 06:10:01 charon systemd[1]: Failed to start Generic clamav scanner daemon. Jan 17 06:10:01 charon systemd[1]: clamd@scan.service: Unit entered failed state. Jan 17 06:10:01 charon systemd[1]: clamd@scan.service: Failed with result 'exit-code'. Jan 17 06:10:06 charon systemd[1]: /lib/systemd/system/clamd@.service:7: Executable path is not absolute: binary /usr/sbin/clamd -c /etc/clamd.d/%i.conf --daemonize=yes Jan 17 06:10:36 charon systemd[1]: /lib/systemd/system/clamd@.service:7: Executable path is not absolute: binary --daemonize=yes Jan 17 06:18:40 charon systemd[1]: /lib/systemd/system/clamd@.service:7: Executable path is not absolute: binary --daemonize=yes Jan 17 06:20:41 charon systemd[1]: /lib/systemd/system/clamd@.service:7: Executable path is not absolute: binary --daemonize=yes Jan 17 06:21:52 charon systemd[1]: /lib/systemd/system/clamd@.service:7: Executable path is not absolute: binary --daemonize=yes

karma

This update broke my daemon setup. systemd fills my log with: Received 0 file descriptor(s) from systemd.

After backout, ,everything works fine: systemctl status clamd@scan.service ● clamd@scan.service - Generic clamav scanner daemon Loaded: loaded (/usr/lib/systemd/system/clamd@scan.service; enabled; vendor preset: disabled) Active: active (running) since Tue 2018-01-16 07:02:44 PST; 31s ago Main PID: 5701 (clamd) Tasks: 2 (limit: 4915) CGroup: /system.slice/system-clamd.slice/clamd@scan.service └─5701 /usr/sbin/clamd -c /etc/clamd.d/scan.conf --foreground=yes

Jan 16 07:02:54 charon clamd[5701]: Portable Executable support enabled. Jan 16 07:02:54 charon clamd[5701]: ELF support enabled. Jan 16 07:02:54 charon clamd[5701]: Mail files support enabled. Jan 16 07:02:54 charon clamd[5701]: OLE2 support enabled. Jan 16 07:02:54 charon clamd[5701]: PDF support enabled. Jan 16 07:02:54 charon clamd[5701]: SWF support enabled. Jan 16 07:02:54 charon clamd[5701]: HTML support enabled. Jan 16 07:02:54 charon clamd[5701]: XMLDOCS support enabled. Jan 16 07:02:54 charon clamd[5701]: HWP3 support enabled. Jan 16 07:02:54 charon clamd[5701]: Self checking every 600 seconds.

With this applied service never starts - it gets stuck in activating: systemctl status clamd@scan.service ● clamd@scan.service - Generic clamav scanner daemon Loaded: loaded (/usr/lib/systemd/system/clamd@scan.service; enabled; vendor preset: disabled) Active: activating (start) since Tue 2018-01-16 06:55:34 PST; 1min 22s ago Cntrl PID: 5172 (clamd) Tasks: 2 (limit: 4915) CGroup: /system.slice/system-clamd.slice/clamd@scan.service └─5172 /usr/sbin/clamd -c /etc/clamd.d/scan.conf --foreground=yes

Jan 16 06:55:43 charon clamd[5172]: Portable Executable support enabled. Jan 16 06:55:43 charon clamd[5172]: ELF support enabled. Jan 16 06:55:43 charon clamd[5172]: Mail files support enabled. Jan 16 06:55:43 charon clamd[5172]: OLE2 support enabled. Jan 16 06:55:43 charon clamd[5172]: PDF support enabled. Jan 16 06:55:43 charon clamd[5172]: SWF support enabled. Jan 16 06:55:43 charon clamd[5172]: HTML support enabled. Jan 16 06:55:43 charon clamd[5172]: XMLDOCS support enabled. Jan 16 06:55:43 charon clamd[5172]: HWP3 support enabled. Jan 16 06:55:43 charon clamd[5172]: Self checking every 600 seconds.

karma

Installed on two different AMD systems. Didn't notice any differences from previous kernel. Output from the two AMD systems is below.

======================================================================= dmesg | grep Spectre [ 0.015059] Spectre V2 mitigation: Vulnerable: Minimal AMD ASM retpoline

grep spectre /proc/cpuinfo bugs : fxsave_leak sysret_ss_attrs null_seg spectre_v1 spectre_v2 bugs : fxsave_leak sysret_ss_attrs null_seg spectre_v1 spectre_v2 bugs : fxsave_leak sysret_ss_attrs null_seg spectre_v1 spectre_v2 bugs : fxsave_leak sysret_ss_attrs null_seg spectre_v1 spectre_v2 bugs : fxsave_leak sysret_ss_attrs null_seg spectre_v1 spectre_v2 bugs : fxsave_leak sysret_ss_attrs null_seg spectre_v1 spectre_v2 bugs : fxsave_leak sysret_ss_attrs null_seg spectre_v1 spectre_v2 bugs : fxsave_leak sysret_ss_attrs null_seg spectre_v1 spectre_v2

=========================================================================

dmesg | grep Spectre [ 0.017130] Spectre V2 mitigation: Vulnerable: Minimal AMD ASM retpoline

grep spectre /proc/cpuinfo bugs : fxsave_leak sysret_ss_attrs null_seg spectre_v1 spectre_v2 bugs : fxsave_leak sysret_ss_attrs null_seg spectre_v1 spectre_v2 bugs : fxsave_leak sysret_ss_attrs null_seg spectre_v1 spectre_v2 bugs : fxsave_leak sysret_ss_attrs null_seg spectre_v1 spectre_v2

karma

Works for me!

BZ#1513641 pyotherside package requires old version of qt5-qtbase

@emarci - no worries - and it's appropriate to test Fedora packaged Fx addons... just not as part of the testcase for Fx. I'll create a ticket on it - maybe there is a rationalization I'm missing - but just seems like a rabbit hole.

@emarci You misconstrued my comment. I completely understand what the "firefox addons" test case requires. I don't believe it belongs here. We're testing Firefox, not the addons. As I mentioned in my previous comment, probably not appropriate hold up stable release of the browser because addon xyz isn't working.

karma

Don't use the Fedora addons, prefer to download addons directly from addons.mozilla.org (which btw has been redesigned for Fx 57). Must easier to find what you want and check compatibility, etc. and get timely updates. Probably not appropriate hold up stable release of the browser because addon xyz isn't working.

Test Case firefox browse
Test Case firefox media
User Icon gbcox commented & provided feedback on php-7.1.10-1.fc26 2 years ago
karma

Works for me

karma

Works for me

karma

Works for me

It's kind of hilarious that people are giving this a +1 when the update doesn't do what the comments said it was suppose to do.

karma

This update still requires nspr - I've noticed that with the Fedora build that web content starts using 100% and firefox becomes sluggish. This behavior doesn't occur with the mozilla version.

Test Case firefox media
Test Case firefox addons
Test Case firefox browse

works for me

karma

Works

karma

Works for e

works for me