The Official HWF Kernel Repo

Impotence · 13-02-2008, 10:25 AM

in soviet Russia vmsplices you!

Off Topic:

i am assuming thats the exploit your talking about, i don't have time to check.

Its only a local exploit, so unless your running ssh (and other people are allowed to login) i doubt you will have had any trouble with it (yet).

Anti-Trend · 13-02-2008, 09:10 PM

Quote:

Originally Posted by Impotence

in soviet Russia vmsplices you!

Yeah, that's the one.

Off Topic:

It is only a local exploit, meaning that you need a shell on the host to be able to exploit it. Even so, that means that another type of exploit could lead to local privilege escalation. For example, say you're running a game server from your system, and there's a vulnerability in the game software. If it's exploited leading to a local shell, they can go one step further and use the kernel flaw to get root. So, it's wise to upgrade if you're running an earlier kernel.

sabashuali · 14-02-2008, 05:37 PM

Hey AT

Thanks for the updated Kernel and all the efforts.
I am afraid I did not get much further with the new kernel either....
Surely I am doing something wrong:

Install the headers
Install the image
Update the environment file
Reboot

This time on boot I do not get an error message, the boot screen simply says:
Decompressing the Kernel..... please wait......
And that's that.

I am sure I am missing something.....

By the way, just to confirm - I am selecting the HWF kernel in Grub when I boot.

donkey42 · 14-02-2008, 06:35 PM

i don't know if i'm right, but, when i threw the kernel in my system i actually installed the image first and then the headers - it entirely possible that i'm completely wrong - but at least i'm trying

Anti-Trend · 14-02-2008, 09:53 PM

It seems that the latest generic kernel build for Lenny was indeed broken sabashuali; it wasn't something you didn't do correctly. I'm currently in the process of recompiling that one, and the Gutsy one as well to be safe. I'm also adding a new build to the group just for you saba: the Pentium-M, which does have a few advantages over the P3 such as SSE2 support. I'll add that one also, as soon as both are finished compiling.

sabashuali · 14-02-2008, 10:04 PM

ACE!!!

Anti-Trend · 14-02-2008, 11:39 PM

OK, here's what's going on right now. The 2.6.24 tree has changed so much API stuff that it's really caused a lot of problems for those of us who unfortunately rely on binary blobs like Nvidia or ATI drivers, etc. Even with those being worked around, 2.6.24 just isn't as been stable in my Ubuntu build environment as the 2.6.23 family was. As a result, I'm going to be rolling back to the 2.6.23.16+ kernel family, which does provide a fix for the recent local account escalation bug. I'll also be adding the Pentium M kernel, as promised.

News will be posted here as soon as I have the newer kernels tested and uploaded to the repo!

Best regards,
-AT

Impotence · 15-02-2008, 01:58 AM

Off Topic:

How long can it be until Nvidia release there source code? ATI/AMD have done it... I don't see what they gain by keeping it closed source, it just means they have to fix it themselves!

Anti-Trend · 15-02-2008, 02:08 AM

Off Topic:

Quote:

Originally Posted by Impotence

Off Topic:

How long can it be until Nvidia release there source code? ATI/AMD have done it... I don't see what they gain by keeping it closed source, it just means they have to fix it themselves!

ATI has not done this yet, they've only raised a fuss about it.

Anti-Trend · 15-02-2008, 10:40 AM

Quote:

Originally Posted by Anti-Trend

...I'm going to be rolling back to the 2.6.23.16+ kernel family, which does provide a fix for the recent local account escalation bug. I'll also be adding the Pentium M kernel, as promised.

News will be posted here as soon as I have the newer kernels tested and uploaded to the repo...

The Lenny kernels are built and uploaded, including the shiny new Pentium M kernel. The new Gutsy kernels are still building right now, but as soon as they're uploaded I'll post again.

sabashuali · 15-02-2008, 08:54 PM

Now I am sure I am doing something wrong!
I am sorry AT, all your efforts are waisted on me.

I installed the new headers then the new image (bothe for the Pentium-M) and then rebooted.
While installing the linux-image-blabla I get the following warning:

Quote:

Hmm. There is a symbolic link /lib/modules/2.6.23.16.hwf.pentium-m.01/build
However, I can not read it: No such file or directory
Therefore, I am deleting /lib/modules/2.6.23.16.hwf.pentium-m.01/build

Hmm. The package shipped with a symbolic link /lib/modules/2.6.23.16.hwf.pentium-m.01/source
However, I can not read the target: No such file or directory
Therefore, I am deleting /lib/modules/2.6.23.16.hwf.pentium-m.01/source

However, the installation finishes without any other issues.
Then on reboot I get a message about "usb 1-1: somthing-o-rather error -71"

Any ideas? WTF am I doing?

Anti-Trend · 15-02-2008, 09:09 PM

The error about the symlinks is normal, it has something to do with the kernel packager utility and seems to randomly affect some systems and not others. The fix is also easy, just make sure you're running the custom kernel, then do the following (as root):

Code:

ln -s /usr/src/linux-headers-`uname -r` /lib/modules/`uname -r`/source
ln -s /usr/src/linux-headers-`uname -r` /lib/modules/`uname -r`/build

It's best to copy and paste my commands exactly since they should work on any Debian system, including Ubuntu.

As for the USB error, does the system still boot OK, or does it hang on that error? It could be a normal thing for your hardware, I really can't say. But if you're using proprietary Nvidia or ATI drivers, it's normal for the system not to boot to a graphical display manager after installing a custom kernel. That's when you install the drivers the vendor way.

P.S. - The new Gutsy kernels are just finishing uploading as I type this.

sabashuali · 15-02-2008, 10:02 PM

Hi AT, I admire your patience....

Quote:

Originally Posted by Anti-Trend

As for the USB error, does the system still boot OK, or does it hang on that error?

No, the system hangs. The error message displays right after the kernel is decompressed. Then the boot hangs.

Which brings me to my next question:

Quote:

Originally Posted by Anti-Trend

.......The fix is also easy, just make sure you're running the custom kernel, then do the following (as root):.......

I am assuming you are referring to the HWF kernel... but that is not possible as I cannot seem to boot into it....
Unless I am wrong and then I can run the 'fix' before I re-attempt to install the new HWF kernel.

Thanks AT....

Anti-Trend · 15-02-2008, 10:12 PM

Hey saba, the problem you're seeing with the symlinks is not a serious issue, and it certainly wouldn't prevent the system from booting. As such, it should be treated as a totally separate issue.

As for your system not booting, sounds like a laptop thing. Try appending the following to the end of your boot string:

Code:

noapic

...does it boot then? If not, please at least include the full error message in its original form so we can look into it.

-AT

sabashuali · 15-02-2008, 11:57 PM

Right, so -

Before adding the noapic, I am getting the following message before the system hangs:

Quote:

usb 1-1: device not accepting address 2, error -71

After adding the noapic, I am getting the following two messages before the system hangs:

Quote:

usb 1-1: unable to read config index 0 descriptor/all
usb 1-1: can't read configuration, error -71

13-02-2008, 10:25 AM	#31 (permalink) Top
Impotence May the source be with u! Join Date: Dec 2004 Age: 19 Male Posts: 1,877 Times Helpful: 126 My Mood: Stressed Status: Offline My Computer	in soviet Russia vmsplices you! Off Topic: i am assuming thats the exploit your talking about, i don't have time to check. Its only a local exploit, so unless your running ssh (and other people are allowed to login) i doubt you will have had any trouble with it (yet). __________________ Dear intel,Already Made My Decision Never trust a computer you can't repair yourself. Windows Vista - Viruses Intruders Spyware Trojans Adware Why Linux is Better!\|Pastafairianism\|Say no to National ID\|Firefox Extensions Guide scientology has been getting alot of attention recently When the rich wage war, it is the poor who die. Where are the WMD's that our governments used to justify the war?

14-02-2008, 05:37 PM	#33 (permalink) Top
sabashuali Ani Ma'amin Join Date: May 2005 Age: 40 Male Posts: 1,417 Times Helpful: 67 My Mood: Breezy Status: Offline My Computer	Hey AT Thanks for the updated Kernel and all the efforts. I am afraid I did not get much further with the new kernel either.... Surely I am doing something wrong: Install the headers Install the image Update the environment file Reboot This time on boot I do not get an error message, the boot screen simply says: Decompressing the Kernel..... please wait...... And that's that. I am sure I am missing something..... By the way, just to confirm - I am selecting the HWF kernel in Grub when I boot. __________________ This is not a PC friendly user!!! I want to use Linux because it is better. Cost and packages are added bonuses! Help with digital video? Help My Mini City to grow Hit or Miss

14-02-2008, 06:35 PM	#34 (permalink) Top
donkey42 Paranoid Geeky Geek Join Date: Mar 2006 Age: 34 Male Posts: 5,746 Times Helpful: 306 My Mood: Paranoid Status: Offline My Computer	i don't know if i'm right, but, when i threw the kernel in my system i actually installed the image first and then the headers - it entirely possible that i'm completely wrong - but at least i'm trying __________________ GRUB manual \| Google Linux \| Distrowatch \| Linux Chix \| Kubuntu \| My Mini City Last edited by donkey42; 14-02-2008 at 06:35 PM. Reason: edit

14-02-2008, 09:53 PM	#35 (permalink) Top
Anti-Trend Nonconformist Geek Join Date: Oct 2003 Age: 27 Male Posts: 4,805 Times Helpful: 522 Status: Offline My Computer	It seems that the latest generic kernel build for Lenny was indeed broken sabashuali; it wasn't something you didn't do correctly. I'm currently in the process of recompiling that one, and the Gutsy one as well to be safe. I'm also adding a new build to the group just for you saba: the Pentium-M, which does have a few advantages over the P3 such as SSE2 support. I'll add that one also, as soon as both are finished compiling. __________________ See My Desktop \| Try Linux \| Install Linux \| Visit My Server \| Support Hardware Forums \| Easily rip DVDs in Linux

14-02-2008, 10:04 PM	#36 (permalink) Top
sabashuali Ani Ma'amin Join Date: May 2005 Age: 40 Male Posts: 1,417 Times Helpful: 67 My Mood: Breezy Status: Offline My Computer	*ACE!!!* __________________ This is not a PC friendly user!!! I want to use Linux because it is better. Cost and packages are added bonuses! Help with digital video? Help My Mini City to grow Hit or Miss

14-02-2008, 11:39 PM	#37 (permalink) Top
Anti-Trend Nonconformist Geek Join Date: Oct 2003 Age: 27 Male Posts: 4,805 Times Helpful: 522 Status: Offline My Computer	OK, here's what's going on right now. The 2.6.24 tree has changed so much API stuff that it's really caused a lot of problems for those of us who unfortunately rely on binary blobs like Nvidia or ATI drivers, etc. Even with those being worked around, 2.6.24 just isn't as been stable in my Ubuntu build environment as the 2.6.23 family was. As a result, I'm going to be rolling back to the 2.6.23.16+ kernel family, which does provide a fix for the recent local account escalation bug. I'll also be adding the Pentium M kernel, as promised. News will be posted here as soon as I have the newer kernels tested and uploaded to the repo! Best regards, -AT __________________ See My Desktop \| Try Linux \| Install Linux \| Visit My Server \| Support Hardware Forums \| Easily rip DVDs in Linux

15-02-2008, 01:58 AM	#38 (permalink) Top
Impotence May the source be with u! Join Date: Dec 2004 Age: 19 Male Posts: 1,877 Times Helpful: 126 My Mood: Stressed Status: Offline My Computer	Off Topic: How long can it be until Nvidia release there source code? ATI/AMD have done it... I don't see what they gain by keeping it closed source, it just means they have to fix it themselves! __________________ Dear intel,Already Made My Decision Never trust a computer you can't repair yourself. Windows Vista - Viruses Intruders Spyware Trojans Adware Why Linux is Better!\|Pastafairianism\|Say no to National ID\|Firefox Extensions Guide scientology has been getting alot of attention recently When the rich wage war, it is the poor who die. Where are the WMD's that our governments used to justify the war?

15-02-2008, 09:09 PM	#42 (permalink) Top
Anti-Trend Nonconformist Geek Join Date: Oct 2003 Age: 27 Male Posts: 4,805 Times Helpful: 522 Status: Offline My Computer	The error about the symlinks is normal, it has something to do with the kernel packager utility and seems to randomly affect some systems and not others. The fix is also easy, just make sure you're running the custom kernel, then do the following (as root): Code: ln -s /usr/src/linux-headers-`uname -r` /lib/modules/`uname -r`/source ln -s /usr/src/linux-headers-`uname -r` /lib/modules/`uname -r`/build It's best to copy and paste my commands exactly since they should work on any Debian system, including Ubuntu. As for the USB error, does the system still boot OK, or does it hang on that error? It could be a normal thing for your hardware, I really can't say. But if you're using proprietary Nvidia or ATI drivers, it's normal for the system not to boot to a graphical display manager after installing a custom kernel. That's when you install the drivers the vendor way. P.S. - The new Gutsy kernels are just finishing uploading as I type this. __________________ See My Desktop \| Try Linux \| Install Linux \| Visit My Server \| Support Hardware Forums \| Easily rip DVDs in Linux

15-02-2008, 10:12 PM	#44 (permalink) Top
Anti-Trend Nonconformist Geek Join Date: Oct 2003 Age: 27 Male Posts: 4,805 Times Helpful: 522 Status: Offline My Computer	Hey saba, the problem you're seeing with the symlinks is not a serious issue, and it certainly wouldn't prevent the system from booting. As such, it should be treated as a totally separate issue. As for your system not booting, sounds like a laptop thing. Try appending the following to the end of your boot string: Code: noapic ...does it boot then? If not, please at least include the full error message in its original form so we can look into it. -AT __________________ See My Desktop \| Try Linux \| Install Linux \| Visit My Server \| Support Hardware Forums \| Easily rip DVDs in Linux

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post