works for me - BUT https://bugzilla.redhat.com/show_bug.cgi?id=1369489 takes some time to figure out and i am still unable to find some better solution then blindly open port ranges for ftp-like services - google for the warning messages in syslog brings NOTHING useful over years besides others asking what it means
wfm i am seeing the kastr warning
both test for regressions fail
sudo ./runtests.sh
[sudo] password for jbwillia:
Test suite called with default
./default/libhugetlbfs SKIP
./default/posix_timers PASS
./default/paxtest PASS
./default/modsign SKIP
./default/sysfs-perms PASS
./default/mq-memory-corruption PASS
./default/insert_leap_second PASS
./default/timer-overhead PASS
./default/stack-randomness PASS
./default/cachedrop FAIL
./default/memfd PASS
./default/selinux-dac-controls PASS
Test suite complete FAIL
Your log file is being submitted
Upload successful!
[jbwillia@localhost kernel-tests]$ sudo ./runtests.sh performance
Test suite called with default
./default/libhugetlbfs SKIP
./default/posix_timers PASS
./default/paxtest PASS
./default/modsign SKIP
./default/sysfs-perms PASS
./default/mq-memory-corruption PASS
./default/insert_leap_second PASS
./default/timer-overhead PASS
./default/stack-randomness PASS
./default/cachedrop FAIL
./default/memfd PASS
./default/selinux-dac-controls PASS
Test suite complete FAIL
Your log file is being submitted
Upload successful!
+1 as this is critically needed for the amdgpu any support for Radeon/Polaris ASIC's.
N.B.,
It would be nice to have KASLR enabled for added security however i can understand that may perturb someone perhaps (new scary kernel feature). So if its held off for one update cycle I can appreciate that.
BZ#1367092 kernel: Use after free in tcp_xmit_retransmit_queue [fedora-all]
BZ#1367091 CVE-2016-6828 kernel: Use after free in tcp_xmit_retransmit_queue
CONFIG_RANDOMIZE_BASE is enabled, it just gets turned off due to hibernation. kaslr and hibernation are mutually exclusive so if you are okay with turning off hibernation you can turn on kaslr by adding kaslr on the kernel command line.
In regards to the kernel regression tests: my ThinkPad T440s fails the "sysfs-perms" test but it has been that way for as long as I've been running the regression tests on this machine.
The way i understand, every user that updates their kernel after this gets pushed to stable and has hibernation turned on (which is on by default, i think?) will suddenly get a very prominent new warning message on boot. Won't that cause a lot of unnecessary confusion?
some random message in th ebootlog is not "very prominent" since most people have graphical boot turned on and don't face any kernel messages at all an dthe ones who care and removbe "rhgb" and "quiet" are expected to come with basic technical understanding
I'm not exactly sure why, but I see the KASLR message (and only this message, a single line at the top of the screen) during boot even though I have rhgb and quiet enabled:
Even if the message is (shortly) visible with rhgb (did not check), it clearly says, that this is due to activated hibernation.
Those who don't need hibernation may add nohibernate to command line via /etc/default/grub (GRUB_CMDLINE_LINUX) and use grub2-mkconfig to recreate grub.cfg.
@tdlrali - one other thing is that while that message on KASLR is mildly annoying this update is critically required for people with AMD Radeon Polaris hardware to get support. Further it fixes a few important security issues also.
sudo ./runtests.sh [sudo] password for jbwillia: Test suite called with default ./default/sysfs-perms PASS
./default/libhugetlbfs SKIP
./default/modsign SKIP
./default/selinux-dac-controls SKIP
./default/cachedrop PASS
./default/posix_timers PASS
./default/timer-overhead PASS
./default/mq-memory-corruption PASS
./default/insert_leap_second PASS
./default/memfd PASS
./default/stack-randomness PASS
./default/paxtest SKIP
Test suite complete PASS
Your log file is being submitted Traceback (most recent call last): File "./fedora_submit.py", line 6, in --RAW HTML NOT ALLOWED-- from fedora.client import OpenIdBaseClient ImportError: No module named fedora.client [jbwillia@noname kernel-tests]$ sudo ./runtests.sh -t performance Test suite called with performance Using config in CONFIG.noname.math.vt.edu Mon Aug 29 09:23:25 EDT 2016 Latency measurements Mon Aug 29 09:27:06 EDT 2016 Calculating file system latency Mon Aug 29 09:27:08 EDT 2016 Local networking Mon Aug 29 09:28:52 EDT 2016 Bandwidth measurements Mon Aug 29 09:48:40 EDT 2016 Calculating context switch overhead Mon Aug 29 09:48:43 EDT 2016 Use of uninitialized value $ in pattern match (m//) at ../scripts/getsummary line 342, --RAW HTML NOT ALLOWED-- line 136. Use of uninitialized value $ in pattern match (m//) at ../scripts/getsummary line 354, --RAW HTML NOT ALLOWED-- line 136. Use of uninitialized value $ in pattern match (m//) at ../scripts/getsummary line 357, --RAW HTML NOT ALLOWED-- line 136. Use of uninitialized value $ in pattern match (m//) at ../scripts/getsummary line 360, --RAW HTML NOT ALLOWED-- line 136. Use of uninitialized value $_ in pattern match (m//) at ../scripts/getsummary line 382, --RAW HTML NOT ALLOWED-- line 136. Argument "" isn't numeric in numeric gt (>) at ../scripts/getsummary line 944, --RAW HTML NOT ALLOWED-- line 777. Argument "" isn't numeric in numeric gt (>) at ../scripts/getsummary line 944, --RAW HTML NOT ALLOWED-- line 777. ./performance/lmbench3 PASS
Test suite complete PASS
Your log file is being submitted
This update has been submitted for testing by labbott.
Works for me.
Generally seems to work, but a message concerning "disabled kaslr" right after grub appears, as in https://bugzilla.redhat.com/show_bug.cgi?id=1350174
works for me - BUT https://bugzilla.redhat.com/show_bug.cgi?id=1369489 takes some time to figure out and i am still unable to find some better solution then blindly open port ranges for ftp-like services - google for the warning messages in syslog brings NOTHING useful over years besides others asking what it means
labbott edited this update.
No regressions noted on x86_64 Ivy Bridge and i686 Diamondville. (I do see the "disabled kaslr" warning others have noted.)
Personal LAMP and mail server running GNOME. All OK.
Works for me.
But kernel regression test reported:
karma: +1
I've been using it on my workstation for a couple of days without problem. My hardware is Intel SandyBridge on Asus P8Z68-V LE.
"KASLR disabled" warning on boot but otherwise works fine for me.
This update has been pushed to testing.
Works
wfm i am seeing the kastr warning both test for regressions fail sudo ./runtests.sh [sudo] password for jbwillia: Test suite called with default ./default/libhugetlbfs SKIP
./default/posix_timers PASS
./default/paxtest PASS
./default/modsign SKIP
./default/sysfs-perms PASS
./default/mq-memory-corruption PASS
./default/insert_leap_second PASS
./default/timer-overhead PASS
./default/stack-randomness PASS
./default/cachedrop FAIL
./default/memfd PASS
./default/selinux-dac-controls PASS
Test suite complete FAIL
Your log file is being submitted Upload successful! [jbwillia@localhost kernel-tests]$ sudo ./runtests.sh performance Test suite called with default ./default/libhugetlbfs SKIP
./default/posix_timers PASS
./default/paxtest PASS
./default/modsign SKIP
./default/sysfs-perms PASS
./default/mq-memory-corruption PASS
./default/insert_leap_second PASS
./default/timer-overhead PASS
./default/stack-randomness PASS
./default/cachedrop FAIL
./default/memfd PASS
./default/selinux-dac-controls PASS
Test suite complete FAIL
Your log file is being submitted Upload successful!
fpaste --sysinfo https://paste.fedoraproject.org/413625/47208301
+1 as this is critically needed for the amdgpu any support for Radeon/Polaris ASIC's.
N.B., It would be nice to have KASLR enabled for added security however i can understand that may perturb someone perhaps (new scary kernel feature). So if its held off for one update cycle I can appreciate that.
CONFIG_RANDOMIZE_BASE is enabled, it just gets turned off due to hibernation. kaslr and hibernation are mutually exclusive so if you are okay with turning off hibernation you can turn on kaslr by adding kaslr on the kernel command line.
With this kernel I have a strange SELinux denial related to bash but everything seems to be working normally, as far as I can tell.
SELinux denial: https://paste.fedoraproject.org/413660/72101153/
In regards to the kernel regression tests: my ThinkPad T440s fails the "sysfs-perms" test but it has been that way for as long as I've been running the regression tests on this machine.
Failed regression test: https://apps.fedoraproject.org/kerneltest/logs/9848
works for me
works for me
WFM Thinkpad X250
Kernel panic on my x86_64 Atom based server. Will open a bug.
Bug #1370061.
Look Good to Me, pass default, minimal stress an performance test
WFM
karma: +1
No regressions noted, Haswell CPU.
works fine on ThinkPad T450s
seems fine on third-gen xps13 dev edition
works
i get this Bug, like many others do, otherwise it works fine
"KASLR disabled" warning on boot but otherwise works fine for me.
Works for me (AMD E-450 APU, x86_64).
KASLR warning looks self-explaining to me. But thanks Laura for noting the details.
Works for me, Skylake system.
I've got a message concerning "disabled kaslr"
Also problems on an i686 VM. See bug #1370795.
I don't think this should get pushed to stable due to the KASLR issue: https://bugzilla.redhat.com/show_bug.cgi?id=1350174
@tdlrali
Did you read the comments here? I don't think so. Please look here:
https://bodhi.fedoraproject.org/updates/kernel-4.7.2-200.fc24#comment-476489
You may disable hibernation at kernel command line and the "issue" should be fixed.
The way i understand, every user that updates their kernel after this gets pushed to stable and has hibernation turned on (which is on by default, i think?) will suddenly get a very prominent new warning message on boot. Won't that cause a lot of unnecessary confusion?
@tdlrali are you kidding? very prominent?
some random message in th ebootlog is not "very prominent" since most people have graphical boot turned on and don't face any kernel messages at all an dthe ones who care and removbe "rhgb" and "quiet" are expected to come with basic technical understanding
I'm not exactly sure why, but I see the KASLR message (and only this message, a single line at the top of the screen) during boot even though I have rhgb and quiet enabled:
cat /proc/cmdline:
That's why I wrote "prominent". But maybe this is a local issue?
Even if the message is (shortly) visible with rhgb (did not check), it clearly says, that this is due to activated hibernation.
Those who don't need hibernation may add nohibernate to command line via /etc/default/grub (GRUB_CMDLINE_LINUX) and use grub2-mkconfig to recreate grub.cfg.
Works for me
Works for me
@tdlrali - one other thing is that while that message on KASLR is mildly annoying this update is critically required for people with AMD Radeon Polaris hardware to get support. Further it fixes a few important security issues also.
Just for the record:
I configured KASLR on my desktop system. Only "nohibernate" don't work, "kaslr" must be present in kernel cmd line. KASLR works without issues so far.
Works
Works for me!.
2nd machine https://paste.fedoraproject.org/416886/14724768
sudo ./runtests.sh [sudo] password for jbwillia: Test suite called with default ./default/sysfs-perms PASS ./default/libhugetlbfs SKIP ./default/modsign SKIP ./default/selinux-dac-controls SKIP ./default/cachedrop PASS ./default/posix_timers PASS ./default/timer-overhead PASS ./default/mq-memory-corruption PASS ./default/insert_leap_second PASS ./default/memfd PASS ./default/stack-randomness PASS ./default/paxtest SKIP Test suite complete PASS Your log file is being submitted Traceback (most recent call last): File "./fedora_submit.py", line 6, in --RAW HTML NOT ALLOWED-- from fedora.client import OpenIdBaseClient ImportError: No module named fedora.client [jbwillia@noname kernel-tests]$ sudo ./runtests.sh -t performance Test suite called with performance Using config in CONFIG.noname.math.vt.edu Mon Aug 29 09:23:25 EDT 2016 Latency measurements Mon Aug 29 09:27:06 EDT 2016 Calculating file system latency Mon Aug 29 09:27:08 EDT 2016 Local networking Mon Aug 29 09:28:52 EDT 2016 Bandwidth measurements Mon Aug 29 09:48:40 EDT 2016 Calculating context switch overhead Mon Aug 29 09:48:43 EDT 2016 Use of uninitialized value $ in pattern match (m//) at ../scripts/getsummary line 342, --RAW HTML NOT ALLOWED-- line 136. Use of uninitialized value $ in pattern match (m//) at ../scripts/getsummary line 354, --RAW HTML NOT ALLOWED-- line 136. Use of uninitialized value $ in pattern match (m//) at ../scripts/getsummary line 357, --RAW HTML NOT ALLOWED-- line 136. Use of uninitialized value $ in pattern match (m//) at ../scripts/getsummary line 360, --RAW HTML NOT ALLOWED-- line 136. Use of uninitialized value $_ in pattern match (m//) at ../scripts/getsummary line 382, --RAW HTML NOT ALLOWED-- line 136. Argument "" isn't numeric in numeric gt (>) at ../scripts/getsummary line 944, --RAW HTML NOT ALLOWED-- line 777. Argument "" isn't numeric in numeric gt (>) at ../scripts/getsummary line 944, --RAW HTML NOT ALLOWED-- line 777. ./performance/lmbench3 PASS Test suite complete PASS Your log file is being submitted
This update has been obsoleted by kernel-4.7.2-201.fc24.
i have a problem whit this kernel, i can't log in after update I see a screen saying error log out. help