tiny core en español

[beroje]

Elevación de privilegios en sudo (en multitud de distribuciones)

Se ha descubierto un problema de seguridad en sudo que permite a
cualquier atacante local elevar privilegios y convertirse en root.
El fallo afecta a casi todas las distribuciones basadas en el
kernel Linux y además de BSD, Mac OS X, etc.

http://unaaldia.hispasec.com/2012/01/elevacion-de-privilegios-en-sudo-en.html

[beroje]

tc@box:~$ /apps/bin/l3afpad

(l3afpad-bin:3634): GLib-GIO-CRITICAL **: Settings schema 'org.gtk.Settings.FileChooser' is not installed


(l3afpad-bin:3634): GLib-GObject-CRITICAL **: g_object_ref: assertion `G_IS_OBJECT (object)' failed
Segmentation fault
tc@box:~$

[beroje]

Opera trabaja bien, pero
cerrando opera:

/usr/bin/scm-load: line 40: can't open /etc/sysconfig/icons: no such file
opera [crash logging]: CRASH!!
/apps/opera-11/lib/opera-11/opera-11 got signal SIGSEGV at address B736D797

Log was created here:
/var/tmp/crash20120215133215.txt
Creating config dir

[beroje]

4.4rc2

FOXIT-1000?


tc@box:~$ la /apps/
total 0
drwxr-xr-x   11 root     root           260 Mar  5 18:08 ./
drwxr-xr-x   18 root     root           380 Mar  5 18:08 ../
drwxr-xr-x    2 root     root           160 Mar  5 18:08 bin/
drwxr-xr-x    4 root     root            54 Dec 31 22:17 dejavu-fonts-ttf/
lrwxrwxrwx    1 root     root            12 Mar  5 18:08 etc -> /opt/scm/etc/
drwxr-xr-x    5 root     root            65 Feb  5 12:53 flash/
drwxr-xr-x    6 1000     1000           131 Jan  9 19:51 foxit-reader/
drwxr-xr-x    4 root     root            39 Jan  1 02:23 gqview2/
drwxr-xr-x    8 root     root           110 Feb  1 15:01 gtk2/
drwxr-sr-x    8 root     root           110 Feb  1 15:44 gtk3/
drwxr-sr-x    4 root     root            39 Feb  6 20:53 l3afpad/
lrwxrwxrwx    1 root     root            14 Mar  5 18:08 share -> /opt/scm/share/
drwxr-xr-x    6 root     root            61 Jan  1 11:16 wget/
tc@box:~$

[beroje]

tc@box:~$ version
4.4rc3
tc@box:~$ /apps/bin/l3afpad prueba1.txt
Xlib: sequence lost (0x10000 > 0x142) in reply type 0x0!
Xlib: sequence lost (0x10000 > 0x143) in reply type 0x1a!
Xlib: sequence lost (0x10000 > 0x143) in reply type 0x0!
Xlib: sequence lost (0x10000 > 0x143) in reply type 0x21!
Xlib: sequence lost (0x10000 > 0x143) in reply type 0x0!
Xlib: sequence lost (0x10000 > 0x143) in reply type 0x21!
Xlib: sequence lost (0x10000 > 0x143) in reply type 0x0!
Xlib: sequence lost (0x10000 > 0x143) in reply type 0x0!
Xlib: sequence lost (0x10000 > 0x143) in reply type 0x21!
Xlib: sequence lost (0x10000 > 0x143) in reply type 0x0!
Xlib: sequence lost (0x10000 > 0x143) in reply type 0x0!
Xlib: sequence lost (0x10000 > 0x143) in reply type 0x0!
Xlib: sequence lost (0x10000 > 0x143) in reply type 0x21!
Xlib: sequence lost (0x10000 > 0x143) in reply type 0x0!
Xlib: sequence lost (0x10000 > 0x143) in reply type 0x0!
Xlib: sequence lost (0x10000 > 0x143) in reply type 0x21!
Xlib: sequence lost (0x10000 > 0x143) in reply type 0x0!
Xlib: sequence lost (0x10000 > 0x143) in reply type 0x0!
Xlib: sequence lost (0x10000 > 0x143) in reply type 0x21!
Xlib: sequence lost (0x10000 > 0x144) in reply type 0x0!

(l3afpad-bin:2819): Gdk-WARNING **: The program 'l3afpad-bin' received an X Window System error.
This probably reflects a bug in the program.
The error was '112'.
  (Details: serial 55156 error_code 112 request_code 0 minor_code 26)
  (Note to programmers: normally, X errors are reported asynchronously;
   that is, you will receive the error a while after causing it.
   To debug your program, run it with the --sync command line
   option to change this behavior. You can then get a meaningful
   backtrace from your debugger if you break on the gdk_x_error() function.)

tc@box:~$
tc@box:~$ mount
rootfs on / type rootfs (rw,relatime,size=1858412k,nr_inodes=218221)
proc on /proc type proc (rw,relatime)
sysfs on /sys type sysfs (rw,relatime)
devpts on /dev/pts type devpts (rw,relatime,mode=600,ptmxmode=000)
tmpfs on /dev/shm type tmpfs (rw,relatime)
fusectl on /sys/fs/fuse/connections type fusectl (rw,relatime)
/dev/sda5 on /mnt/sda5 type ext4 (rw,relatime,barrier=1,data=ordered)
/dev/loop0 on /tmp/tcloop/fltk-1.10 type squashfs (ro,relatime)
/dev/loop1 on /tmp/tcloop/Xlibs type squashfs (ro,relatime)
/dev/loop2 on /tmp/tcloop/Xprogs type squashfs (ro,relatime)
/dev/loop3 on /tmp/tcloop/wbar type squashfs (ro,relatime)
/dev/loop4 on /tmp/tcloop/jwm type squashfs (ro,relatime)
/dev/loop5 on /tmp/tcloop/glib1 type squashfs (ro,relatime)
/dev/loop6 on /tmp/tcloop/gtk1 type squashfs (ro,relatime)
/dev/loop7 on /tmp/tcloop/emelfm type squashfs (ro,relatime)
/dev/loop8 on /tmp/tcloop/firmware-iwlwifi type squashfs (ro,relatime)
/dev/loop9 on /tmp/tcloop/wireless-3.0.21-tinycore type squashfs (ro,relatime)
/dev/loop10 on /tmp/tcloop/libiw type squashfs (ro,relatime)
/dev/loop11 on /tmp/tcloop/wireless_tools type squashfs (ro,relatime)
/dev/loop12 on /tmp/tcloop/openssl-1.0.0 type squashfs (ro,relatime)
/dev/loop13 on /tmp/tcloop/wpa_supplicant type squashfs (ro,relatime)
/dev/loop14 on /tmp/tcloop/wifi type squashfs (ro,relatime)
/dev/loop15 on /tmp/tcloop/expat2 type squashfs (ro,relatime)
/dev/loop16 on /tmp/tcloop/fontconfig type squashfs (ro,relatime)
/dev/loop17 on /tmp/tcloop/pixman type squashfs (ro,relatime)
/dev/loop18 on /tmp/tcloop/Xorg-7.6-bin type squashfs (ro,relatime)
/dev/loop19 on /tmp/tcloop/Xorg-7.6-lib type squashfs (ro,relatime)
/dev/loop20 on /tmp/tcloop/Xorg-fonts type squashfs (ro,relatime)
/dev/loop21 on /tmp/tcloop/Xorg-7.6 type squashfs (ro,relatime)
/dev/loop22 on /tmp/tcloop/xf86-video-nv type squashfs (ro,relatime)
/dev/loop23 on /tmp/tcloop/hicolor-icon-theme type squashfs (ro,relatime)
/dev/loop24 on /apps/gtk3 type squashfs (ro,relatime)
/dev/loop25 on /apps/gtk2 type squashfs (ro,relatime)
/dev/loop26 on /apps/wget type squashfs (ro,relatime)
/dev/loop27 on /apps/l3afpad type squashfs (ro,relatime)
/dev/loop28 on /apps/gqview2 type squashfs (ro,relatime)
/dev/loop29 on /apps/dejavu-fonts-ttf type squashfs (ro,relatime)
/dev/loop30 on /apps/flash type squashfs (ro,relatime)
/dev/loop31 on /apps/foxit-reader type squashfs (ro,relatime)
tc@box:~$

[beroje]

pruebal3afpad.txt

tc@box:~$ cd /mnt/sda5/coretest/tce/optional/
tc@box:~$ tce-load -i Xvesa.tcz
tc@box:~$ startx
tc@box:~$ /apps/bin/l3afpad prueba2.txt
tc@box:~$

Con Xvesa.tcz trabaja bien...


sudo reboot

tc@box:~$ cd /mnt/sda5/coretest/tce/optional/
tc@box:~$ tce-load -i Xorg-7.6.tcz
tc@box:~$ startx
tc@box:~$ /apps/bin/l3afpad prueba3.txt
Xlib: sequence lost (0x10000 > 0x141) in reply type 0x0!
Xlib: sequence lost (0x10000 > 0x142) in reply type 0x0!
Segmentation fault
tc@box:~$

Con Xorg-7.6.tcz no trabaja bien... ...

[maro]

(I'm sorry for not using Spanish, but I'd imagine the following will still be understood)
I've done a quick re-test (with TC 4.4rc3 in a QEMU VM) and even though I did not see a segmentation fault the application was totally unresponsive and in the end I had to use 'xkill' to terminate it. This was the case when using 'Xorg-7.5' and 'Xorg-7.6', but I found that 'Xorg-7.4' (and of course 'Xvesa') had no such problems.

Therefore I can only suggest (as a workaround) to use the old Xorg server (or stick with Xvesa). Furthermore I'd be surprised if Jason pays attention to a scm bug report hidden in this thread here. You'd better create a new one in the 'SCM Extensions' sub-forum.

[Jason W]

Yeah, a bug report in the scm area would be seen much sooner, but I will look into what may be causing the crash/hang.   Normally anything that works with Xvesa will work with Xorg, but there may be an issue with the X libs that are packed into the extension.  I will try to find out tonight.

Traducción aproximada de lo anterior:

Sí, un informe de error en el "área de SMC" se vería mucho más pronto, pero voy a mirar en lo que puede ser la causa del accidente / colgar. Normalmente, todo lo que trabaja con Xvesa trabajará con Xorg, pero puede haber un problema con las librerías X que se colocan en la extensión. Voy a tratar de encontrar a salir esta noche.

[Jason W]

This appears to be a gtk3 issue, as audacious-gtk3 sees the same behavior.  I will post more in the scm area.

[beroje]

---getFlash11.scm---

Video flash= NO VIDEO

tce-load -i curl.tcz

Video flash= OK.

[beroje]

"CorePlus-current.iso" con multiples versiones en internet, posiblemente
alguna con "Malwarwe". Use solamente la original.

[AbNoRMiS]

---getFlash11.scm---

Video flash= NO VIDEO

tce-load -i curl.tcz

Video flash= OK.

after getFlash11.scm installation it would be nice to run getFlash11.sh and follow instructions from here

[beroje]

tc@box:~$ la /apps/
total 0
drwxr-xr-x   18 root     root           400 May 15 22:19 ./
drwxr-xr-x   18 root     root           380 May 15 22:19 ../
drwxr-xr-x    2 root     root           540 May 15 22:19 bin/
drwxr-xr-x    9 root     root           371 Feb 26 19:57 chromium-browser/
drwxr-xr-x    8 root     root           126 Jan 15 13:22 clamav/
drwxr-xr-x    4 root     root            54 Dec 31 22:17 dejavu-fonts-ttf/
drwxr-xr-x    6 root     root            65 Jan  8 14:12 emelfm2/
drwxr-xr-x    7 root     root            99 Jan 21 09:42 epdfview/
lrwxrwxrwx    1 root     root            12 May 15 22:19 etc -> /opt/scm/etc/
drwxr-xr-x    5 root     root            65 May 11 20:45 flash/
drwxr-xr-x    6 clamav   clamav         131 Jan  9 19:51 foxit-reader/
drwxr-xr-x    4 root     root            39 Jan  1 02:23 gqview2/
drwxr-xr-x    8 root     root           110 Feb  1 15:01 gtk2/
drwxr-sr-x    6 root     root            66 Apr 10 00:20 links2/
drwxr-xr-x    7 root     root           100 Jan 29 15:37 midori/
drwxr-xr-x    5 root     root            70 Jan  8 09:30 minefield9/
drwxr-xr-x    5 root     root            74 Mar  4 21:39 opera-11/
lrwxrwxrwx    1 root     root            14 May 15 22:19 share -> /opt/scm/share/
drwxr-sr-x    5 tc       staff           94 Feb  7 22:49 vlc/
drwxr-xr-x    6 root     root            61 Jan  1 11:16 wget/
tc@box:~$

[beroje]

tc@box:~$ chromium-browser
[4515:4523:565155989:ERROR:bus.cc(298)] Failed to connect to the bus: Failed to connect to socket /var/run/dbus/system_bus_socket: No such file or directory
[4515:4523:565156352:ERROR:bus.cc(298)] Failed to connect to the bus: Failed to connect to socket /var/run/dbus/system_bus_socket: No such file or directory
failed to create drawable
The program 'exe' received an X Window System error.
This probably reflects a bug in the program.
The error was 'BadPixmap (invalid Pixmap parameter)'.
  (Details: serial 128 error_code 4 request_code 54 minor_code 0)
  (Note to programmers: normally, X errors are reported asynchronously;
   that is, you will receive the error a while after causing it.
   To debug your program, run it with the --sync command line
   option to change this behavior. You can then get a meaningful
   backtrace from your debugger if you break on the gdk_x_error() function.)

[beroje]

Title:      chromium-browser.tcz
Description:   Chromium Web Browser.
Version:   19.0.1084.52
Author:      Chromium Authors
Original-site:   http://code.google.com/chromium/
Copying-policy:   BSD
Size:      38.0M
Extension_by:   Arslan S.


Title:      chromium-browser.scm
Description:   Chromium Web Browser.
Version:   15.0.874.121
Author:      Chromium Authors
Original-site:   http://code.google.com/chromium/
Copying-policy:   BSD
Size:      40M
Extension_by:   Arslan S.


Download Chrome For Linux (Debian/Ubuntu/Fedora/openSUSE)