You are not logged in.

#1 2017-05-28 18:15:58

heidegger
Member
Registered: 2013-04-24
Posts: 87

Pacman upgrade broke sudo

I can no longer sudo after an upgrade.  I do have the ability to log in directly with root to make sytem changes.  When this occurred I noticed that I did have a sudoers.pacnew file in /etc.  I backed up the original and migrated to using the new sudoers file and have re-enabled the wheel group in it.
I am open to suggestions as this has not corrected the problem.

Thanks,
H.

Offline

#2 2017-05-28 18:21:52

ayekat
Member
Registered: 2011-01-17
Posts: 1,589

Re: Pacman upgrade broke sudo

Hello, please post an error message; "I can no longer sudo" is not very precise.


pkgshackscfgblag

Offline

#3 2017-05-28 18:23:31

heidegger
Member
Registered: 2013-04-24
Posts: 87

Re: Pacman upgrade broke sudo

[camus@camus ~]$ sudo pacman -Syyu
sudo: effective uid is not 0, is /usr/bin/sudo on a file system with the 'nosuid' option set or an NFS file system without root privileges?
[camus@camus ~]$

Offline

#4 2017-05-28 18:24:13

jasonwryan
Anarchist
From: .nz
Registered: 2009-05-09
Posts: 30,424
Website

Re: Pacman upgrade broke sudo

Please post your full pacman log.


Arch + dwm   •   Mercurial repos  •   Surfraw

Registered Linux User #482438

Offline

#5 2017-05-28 18:25:50

ayekat
Member
Registered: 2011-01-17
Posts: 1,589

Re: Pacman upgrade broke sudo


pkgshackscfgblag

Offline

#6 2017-05-28 19:09:58

heidegger
Member
Registered: 2013-04-24
Posts: 87

Re: Pacman upgrade broke sudo

ayekat, I do use enlightenment so there is a big chance that bug is related.  Thanks for the link.
Anarchist:, I limited the output to only include the date of the upgrade that broke sudo and later, although I started at the beginning of the day...

[camus@camus ~]$ cat /var/log/pacman.log
...
[2017-05-27 10:26] [PACMAN] Running 'pacman -Syyu'
[2017-05-27 10:26] [PACMAN] synchronizing package lists
[2017-05-27 10:26] [PACMAN] starting full system upgrade
[2017-05-27 10:26] [PACMAN] Running 'pacman -S -y -y -u'
[2017-05-27 10:26] [PACMAN] synchronizing package lists
[2017-05-27 10:26] [PACMAN] starting full system upgrade
[2017-05-27 10:30] [PACMAN] Running 'pacman -Rdd isl15'
[2017-05-27 10:30] [ALPM] transaction started
[2017-05-27 10:30] [ALPM] removed isl15 (0.15-1)
[2017-05-27 10:30] [ALPM] transaction completed
[2017-05-27 10:30] [ALPM] running 'systemd-update.hook'...
[2017-05-27 10:30] [PACMAN] Running 'pacman -Sy'
[2017-05-27 10:30] [PACMAN] synchronizing package lists
[2017-05-27 10:32] [PACMAN] Running 'pacman -Ud --ask 36 --noconfirm /home/camus/.cache/pacaur/rapidjson-git/rapidjson-git-r191
1.33443e63-1-any.pkg.tar.xz'
[2017-05-27 10:34] [PACMAN] Running 'pacman -Ud --ask 36 --noconfirm /home/camus/.cache/pacaur/isl/isl-0.18-3-x86_64.pkg.tar.xz
'
[2017-05-27 10:34] [ALPM] transaction started
[2017-05-27 10:34] [ALPM] installed isl (0.18-3)
[2017-05-27 10:34] [ALPM] transaction completed
[2017-05-27 10:34] [ALPM] running 'systemd-update.hook'...
[2017-05-27 10:34] [PACMAN] Running 'pacman -D --asdeps isl'
[2017-05-27 10:35] [PACMAN] Running 'pacman -Ud --ask 36 --noconfirm /home/camus/.cache/pacaur/cloog/cloog-0.18.5-1-x86_64.pkg.
tar.xz'
[2017-05-27 10:35] [ALPM] transaction started
[2017-05-27 10:35] [ALPM] upgraded cloog (0.18.4-2 -> 0.18.5-1)
[2017-05-27 10:35] [ALPM] transaction completed
[2017-05-27 10:35] [ALPM] running 'systemd-update.hook'...
[2017-05-27 20:01] [PACMAN] Running 'pacman -Syu'
[2017-05-27 20:01] [PACMAN] synchronizing package lists
[2017-05-27 20:01] [PACMAN] starting full system upgrade
[2017-05-27 20:04] [PACMAN] Running 'pacman -Ud --ask 36 --noconfirm /home/camus/.cache/pacaur/spotify/spotify-1.0.55.487-2-x86
_64.pkg.tar.xz'
[2017-05-27 20:04] [ALPM] transaction started
[2017-05-27 20:04] [ALPM] reinstalled spotify (1.0.55.487-2)
[2017-05-27 20:04] [ALPM] transaction completed
[2017-05-27 20:04] [ALPM] running 'gtk-update-icon-cache.hook'...
[2017-05-27 20:04] [ALPM] running 'systemd-update.hook'...
[2017-05-27 20:04] [ALPM] running 'update-desktop-database.hook'...
[2017-05-27 20:04] [PACMAN] Running 'pacman -R libopenssl-1.0-compat libcurl-openssl-1.0'
[2017-05-27 20:05] [ALPM] transaction started
[2017-05-27 20:05] [ALPM] removed libcurl-openssl-1.0 (7.54.0-2)
[2017-05-27 20:05] [ALPM] removed libopenssl-1.0-compat (1.0.2.l-1)
[2017-05-27 20:05] [ALPM] transaction completed
[2017-05-27 20:05] [ALPM] running 'systemd-update.hook'...
[2017-05-27 20:05] [PACMAN] Running 'pacman -R openssl-1.0'
[2017-05-27 20:06] [PACMAN] Running 'pacman -Syyu openssl-1.0'
[2017-05-27 20:06] [PACMAN] synchronizing package lists
[2017-05-27 20:06] [PACMAN] starting full system upgrade
[2017-05-27 20:07] [ALPM] transaction started
[2017-05-27 20:07] [ALPM] reinstalled openssl-1.0 (1.0.2.k-3)
[2017-05-27 20:07] [ALPM] transaction completed
[2017-05-27 20:07] [ALPM] running 'systemd-update.hook'...
[2017-05-27 20:09] [PACMAN] Running 'pacman -Ud --ask 36 --noconfirm /home/camus/.cache/pacaur/spotify/spotify-1.0.55.487-2-x86
_64.pkg.tar.xz'
[2017-05-27 20:09] [ALPM] transaction started
[2017-05-27 20:09] [ALPM] reinstalled spotify (1.0.55.487-2)
[2017-05-27 20:09] [ALPM] transaction completed
[2017-05-27 20:09] [ALPM] running 'gtk-update-icon-cache.hook'...
[2017-05-27 20:09] [ALPM] running 'systemd-update.hook'...
[2017-05-27 20:09] [ALPM] running 'update-desktop-database.hook'...
[2017-05-27 20:13] [PACMAN] Running 'pacman -Ud --ask 36 --noconfirm /home/camus/.cache/pacaur/libcurl-openssl-1.0/libcurl-open
ssl-1.0-7.54.0-2-x86_64.pkg.tar.xz'
[2017-05-27 20:13] [ALPM] transaction started
[2017-05-27 20:13] [ALPM] installed libcurl-openssl-1.0 (7.54.0-2)
[2017-05-27 20:13] [ALPM] transaction completed
[2017-05-27 20:13] [ALPM] running 'systemd-update.hook'...
[2017-05-27 20:15] [PACMAN] Running 'pacman -S openssl-1.0'
[2017-05-27 20:20] [PACMAN] Running 'pacman -Syyu'
[2017-05-27 20:20] [PACMAN] synchronizing package lists
[2017-05-27 20:20] [PACMAN] starting full system upgrade
[2017-05-27 20:22] [ALPM] running '70-dkms-remove.hook'...
[2017-05-27 20:22] [ALPM-SCRIPTLET] ==> dkms remove vboxhost/5.1.22 -k 4.10.13-1-ARCH
[2017-05-27 20:22] [ALPM] transaction started
[2017-05-27 20:22] [ALPM] upgraded alsa-lib (1.1.3-1 -> 1.1.4-1)
[2017-05-27 20:22] [ALPM] upgraded alsa-plugins (1.1.1-1 -> 1.1.4-1)
[2017-05-27 20:22] [ALPM] upgraded hwids (20161103-1 -> 20170328-1)
[2017-05-27 20:22] [ALPM] upgraded alsa-utils (1.1.3-2 -> 1.1.4-1)
[2017-05-27 20:22] [ALPM] upgraded arm-none-eabi-gcc (6.3.1-1 -> 7.1.0-1)
[2017-05-27 20:22] [ALPM] upgraded cabal-install (1.24.0.0-8 -> 1.24.0.0-10)
[2017-05-27 20:22] [ALPM] upgraded libdrm (2.4.80-1 -> 2.4.81-1)
[2017-05-27 20:22] [ALPM] upgraded llvm-libs (4.0.0-2 -> 4.0.0-3)
[2017-05-27 20:22] [ALPM] upgraded glib2 (2.52.1+4+g2eddcef1e-1 -> 2.52.2+1+gb8bd46bc8-1)
[2017-05-27 20:22] [ALPM] upgraded freetype2 (2.7.1-2 -> 2.8-2)
[2017-05-27 20:22] [ALPM] upgraded openssl (1.1.0.e-1 -> 1.1.0.f-1)
[2017-05-27 20:22] [ALPM] upgraded mesa (17.0.5-1 -> 17.1.0-1)
[2017-05-27 20:22] [ALPM] upgraded cgal (4.9.1-1 -> 4.9.1-2)
[2017-05-27 20:22] [ALPM] upgraded clamav (0.99.2-6 -> 0.99.2-7)
[2017-05-27 20:22] [ALPM] upgraded clang (4.0.0-2 -> 4.0.0-3)
[2017-05-27 20:22] [ALPM] upgraded protobuf (3.2.1-1 -> 3.3.1-1)
[2017-05-27 20:22] [ALPM] upgraded gnutls (3.5.11-1 -> 3.5.12-1)
[2017-05-27 20:22] [ALPM] upgraded opus (1.1.4-1 -> 1.1.5-1)
[2017-05-27 20:22] [ALPM] upgraded libx264 (2:148.20170121-1 -> 2:148.20170519-1)
[2017-05-27 20:22] [ALPM] upgraded libtiff (4.0.7-3 -> 4.0.8-1)
[2017-05-27 20:22] [ALPM] upgraded ffmpeg (1:3.3-5 -> 1:3.3.1-8)
[2017-05-27 20:22] [ALPM] upgraded jasper (2.0.12-1 -> 2.0.13-1)
[2017-05-27 20:22] [ALPM] upgraded clementine (1.3.1-7 -> 1.3.1-8)
[2017-05-27 20:22] [ALPM] upgraded confuse (3.0-1 -> 3.1-1)
[2017-05-27 20:22] [ALPM] upgraded imagemagick (6.9.8.5-1 -> 6.9.8.6-1)
[2017-05-27 20:22] [ALPM] upgraded cups-filters (1.13.5-1 -> 1.14.0-1)
[2017-05-27 20:22] [ALPM] upgraded dialog (1:1.3_20170131-1 -> 1:1.3_20170509-1)
[2017-05-27 20:22] [ALPM] upgraded dmidecode (3.0-1 -> 3.1-1)
[2017-05-27 20:22] [ALPM] upgraded fail2ban (0.9.6-2 -> 0.9.7-1)
[2017-05-27 20:22] [ALPM] upgraded ffmpeg2.8 (2.8.11-6 -> 2.8.11-9)
[2017-05-27 20:22] [ALPM] upgraded pango (1.40.5-1 -> 1.40.6+9+g92cc73c8-1)
[2017-05-27 20:22] [ALPM] upgraded firefox (53.0.2-1 -> 53.0.3-1)
[2017-05-27 20:22] [ALPM] upgraded glib2-docs (2.52.1+4+g2eddcef1e-1 -> 2.52.2+1+gb8bd46bc8-1)
[2017-05-27 20:22] [ALPM] upgraded glibmm (2.51.6-2 -> 2.51.7-1)
[2017-05-27 20:22] [ALPM] upgraded npth (1.3-1 -> 1.4-1)
[2017-05-27 20:22] [ALPM] upgraded gnupg (2.1.20-2 -> 2.1.21-1)
[2017-05-27 20:22] [ALPM] upgraded go (2:1.8.1-2 -> 2:1.8.3-1)
[2017-05-27 20:22] [ALPM] upgraded gpac (1:0.6.1-2 -> 1:0.7.1-2)
[2017-05-27 20:22] [ALPM] installed libx264-all (2:148.20170519-1)
[2017-05-27 20:22] [ALPM] upgraded gst-plugins-ugly (1.12.0-1 -> 1.12.0-3)
[2017-05-27 20:22] [ALPM] upgraded gtksourceview3 (3.24.1+1+ge88e8299-1 -> 3.24.2-1)
[2017-05-27 20:22] [ALPM] upgraded hashcat (3.40-1 -> 1:3.5.0-1)
[2017-05-27 20:22] [ALPM] upgraded hdparm (9.51-1 -> 9.52-1)
[2017-05-27 20:22] [ALPM] upgraded i3status (2.11-1 -> 2.11-2)
[2017-05-27 20:22] [ALPM] upgraded libibus (1.5.15-1 -> 1.5.16-1)
[2017-05-27 20:22] [ALPM] upgraded ibus (1.5.15-1 -> 1.5.16-1)
[2017-05-27 20:22] [ALPM] upgraded lib32-alsa-lib (1.1.3-1 -> 1.1.4-1)
[2017-05-27 20:22] [ALPM] upgraded lib32-alsa-plugins (1.1.1-1 -> 1.1.4-1)
[2017-05-27 20:22] [ALPM] upgraded lib32-atk (2.22+1+gd57f97d-1 -> 2.24.0+4+gbf71ccc-1)
[2017-05-27 20:22] [ALPM] upgraded lib32-openssl (1:1.1.0.e-1 -> 1:1.1.0.f-1)
[2017-05-27 20:22] [ALPM] upgraded lib32-krb5 (1.15-1 -> 1.15.1-1)
[2017-05-27 20:22] [ALPM] upgraded lib32-libdrm (2.4.79-1 -> 2.4.81-1)
[2017-05-27 20:22] [ALPM] installed lib32-lm_sensors (3.4.0-1)
[2017-05-27 20:22] [ALPM] upgraded lib32-mesa (17.0.5-1 -> 17.1.0-1)
[2017-05-27 20:22] [ALPM] upgraded openssl-1.0 (1.0.2.k-3 -> 1.0.2.l-1)
[2017-05-27 20:22] [ALPM] upgraded lib32-openssl-1.0 (1.0.2.l-1 -> 1.0.2.l-2)
[2017-05-27 20:22] [ALPM] upgraded lib32-p11-kit (0.23.2-1 -> 0.23.5-1)
[2017-05-27 20:22] [ALPM] upgraded libaacs (0.8.1-2 -> 0.9.0-1)
[2017-05-27 20:22] [ALPM] upgraded libatomic_ops (7.4.4-1 -> 7.4.6-1)
[2017-05-27 20:22] [ALPM] upgraded libftdi (1.3-3 -> 1.3-4)
[2017-05-27 20:22] [ALPM] upgraded libwbclient (4.5.8-1 -> 4.5.10-1)
[2017-05-27 20:22] [ALPM] upgraded libxnvctrl (378.13-1 -> 381.22-1)
[2017-05-27 20:23] [ALPM] upgraded linux-firmware (20170309.695f2d6-1 -> 20170422.ade8332-1)
[2017-05-27 20:23] [ALPM] upgraded linux (4.10.13-1 -> 4.11.2-1)
[2017-05-27 20:23] [ALPM-SCRIPTLET] >>> Updating module dependencies. Please wait ...
[2017-05-27 20:23] [ALPM] upgraded linux-headers (4.10.13-1 -> 4.11.2-1)
[2017-05-27 20:23] [ALPM] upgraded llvm (4.0.0-2 -> 4.0.0-3)
[2017-05-27 20:23] [ALPM] upgraded logrotate (3.12.1-1 -> 3.12.2-1)
[2017-05-27 20:23] [ALPM] upgraded lynis (2.4.8-1 -> 2.5.0-1)
[2017-05-27 20:23] [ALPM] upgraded nodejs (7.10.0-1 -> 7.10.0-2)
[2017-05-27 20:23] [ALPM] upgraded npm (4.5.0-1 -> 4.6.1-1)
[2017-05-27 20:23] [ALPM] upgraded nvidia (381.22-1 -> 381.22-2)
[2017-05-27 20:23] [ALPM-SCRIPTLET] In order to use nvidia module, reboot the system.
[2017-05-27 20:23] [ALPM] upgraded nvidia-settings (378.13-1 -> 381.22-1)
[2017-05-27 20:23] [ALPM] upgraded pcsclite (1.8.20-1 -> 1.8.21-1)
[2017-05-27 20:23] [ALPM] upgraded perl-net-http (6.14-1 -> 6.15-1)
[2017-05-27 20:23] [ALPM] upgraded postgresql-libs (9.6.2-1 -> 9.6.3-1)
[2017-05-27 20:23] [ALPM] upgraded python-cairo (1.10.0-8 -> 1.13.1-1)
[2017-05-27 20:23] [ALPM] upgraded python-chardet (2.3.0-4 -> 3.0.2-1)
[2017-05-27 20:23] [ALPM] upgraded python-munkres (1.0.9-1 -> 1.0.10-1)
[2017-05-27 20:23] [ALPM] upgraded python-requests (2.13.0-1 -> 2.14.2-1)
[2017-05-27 20:23] [ALPM] upgraded python2-attrs (16.3.0-2 -> 17.2.0-1)
[2017-05-27 20:23] [ALPM] upgraded python2-automat (0.5.0-1 -> 0.6.0-1)
[2017-05-27 20:23] [ALPM] upgraded python2-cairo (1.10.0-2 -> 1.13.1-1)
[2017-05-27 20:23] [ALPM] upgraded python2-chardet (2.3.0-4 -> 3.0.2-1)
[2017-05-27 20:23] [ALPM] upgraded python2-cryptography (1.8.1-4 -> 1.8.2-1)
[2017-05-27 20:23] [ALPM] upgraded python2-werkzeug (0.12.1-1 -> 0.12.2-1)
[2017-05-27 20:23] [ALPM] upgraded python2-flask (0.12.1-1 -> 0.12.2-1)
[2017-05-27 20:23] [ALPM] upgraded python2-m2crypto (0.24.0-3 -> 0.24.0-4)
[2017-05-27 20:23] [ALPM] upgraded python2-munkres (1.0.9-1 -> 1.0.10-1)
[2017-05-27 20:23] [ALPM] upgraded python2-pbr (3.0.0-1 -> 3.0.1-1)
[2017-05-27 20:23] [ALPM] upgraded python2-protobuf (3.2.1-1 -> 3.3.1-1)
[2017-05-27 20:23] [ALPM] upgraded python2-pycountry (17.1.8-1 -> 17.5.14-1)
[2017-05-27 20:23] [ALPM] upgraded python2-pycryptodomex (3.4.5-2 -> 3.4.6-1)
[2017-05-27 20:23] [ALPM] upgraded python2-requests (2.13.0-1 -> 2.14.2-1)
[2017-05-27 20:23] [ALPM] upgraded python2-zope-interface (4.4.0-1 -> 4.4.1-1)
[2017-05-27 20:23] [ALPM] upgraded qca-qt4 (2.1.3-3 -> 2.1.3-4)
[2017-05-27 20:23] [ALPM] upgraded qt5-base (5.8.0-11 -> 5.8.0-12)
[2017-05-27 20:23] [ALPM] upgraded qcad (3.16.5.0-1 -> 3.17.1.1-1)
[2017-05-27 20:23] [ALPM] upgraded qt5-declarative (5.8.0-1 -> 5.8.0-2)
[2017-05-27 20:23] [ALPM] upgraded qt5-webengine (5.8.0-8 -> 5.8.0-9)
[2017-05-27 20:23] [ALPM] upgraded smbclient (4.5.8-1 -> 4.5.10-1)
[2017-05-27 20:23] [ALPM] upgraded samba (4.5.8-1 -> 4.5.10-1)
[2017-05-27 20:23] [ALPM] upgraded speech-dispatcher (0.8.6-1 -> 0.8.7-1)
[2017-05-27 20:23] [ALPM] upgraded sudo (1.8.19.p2-1 -> 1.8.20-1)
[2017-05-27 20:23] [ALPM] upgraded tor (0.3.0.6-1 -> 0.3.0.7-1)
[2017-05-27 20:23] [ALPM] upgraded udisks2 (2.6.4-1 -> 2.6.5-1)
[2017-05-27 20:23] [ALPM] upgraded ufw (0.35-2 -> 0.35-3)
[2017-05-27 20:23] [ALPM] upgraded upx (3.93-1 -> 3.94-1)
[2017-05-27 20:23] [ALPM] upgraded vlc (2.2.4-9 -> 2.2.5.1-1)
[2017-05-27 20:23] [ALPM] upgraded webkit2gtk (2.16.2-1 -> 2.16.3-1)
[2017-05-27 20:23] [ALPM] upgraded wine (2.8-1 -> 2.9-1)
[2017-05-27 20:23] [ALPM] upgraded winetricks (20170327-1 -> 20170517-1)
[2017-05-27 20:23] [ALPM] upgraded wxgtk (3.0.3-1 -> 3.0.3.1-1)
[2017-05-27 20:23] [ALPM] upgraded x264 (2:148.20170121-1 -> 2:148.20170519-1)
[2017-05-27 20:23] [ALPM] upgraded xfce4-pulseaudio-plugin (0.2.4+8+g50c9279-1 -> 0.2.5-1)
[2017-05-27 20:23] [ALPM] upgraded xfsprogs (4.10.0-1 -> 4.11.0-1)
[2017-05-27 20:23] [ALPM] transaction completed
[2017-05-27 20:23] [ALPM] running '70-dkms-install.hook'...
[2017-05-27 20:23] [ALPM-SCRIPTLET] ==> dkms install vboxhost/5.1.22 -k 4.11.2-1-ARCH
[2017-05-27 20:24] [ALPM] running '90-linux.hook'...
[2017-05-27 20:24] [ALPM-SCRIPTLET] ==> Building image from preset: /etc/mkinitcpio.d/linux.preset: 'default'
[2017-05-27 20:24] [ALPM-SCRIPTLET]   -> -k /boot/vmlinuz-linux -c /etc/mkinitcpio.conf -g /boot/initramfs-linux.img
[2017-05-27 20:24] [ALPM-SCRIPTLET] ==> Starting build: 4.11.2-1-ARCH
[2017-05-27 20:24] [ALPM-SCRIPTLET]   -> Running build hook: [base]
[2017-05-27 20:24] [ALPM-SCRIPTLET]   -> Running build hook: [udev]
[2017-05-27 20:24] [ALPM-SCRIPTLET]   -> Running build hook: [autodetect]
[2017-05-27 20:24] [ALPM-SCRIPTLET]   -> Running build hook: [modconf]
[2017-05-27 20:24] [ALPM-SCRIPTLET]   -> Running build hook: [block]
[2017-05-27 20:24] [ALPM-SCRIPTLET]   -> Running build hook: [filesystems]
[2017-05-27 20:24] [ALPM-SCRIPTLET]   -> Running build hook: [keyboard]
[2017-05-27 20:24] [ALPM-SCRIPTLET]   -> Running build hook: [fsck]
[2017-05-27 20:24] [ALPM-SCRIPTLET] ==> Generating module dependencies
[2017-05-27 20:24] [ALPM-SCRIPTLET] ==> Creating gzip-compressed initcpio image: /boot/initramfs-linux.img
[2017-05-27 20:24] [ALPM-SCRIPTLET] ==> Image generation successful
[2017-05-27 20:24] [ALPM-SCRIPTLET] ==> Building image from preset: /etc/mkinitcpio.d/linux.preset: 'fallback'
[2017-05-27 20:24] [ALPM-SCRIPTLET]   -> -k /boot/vmlinuz-linux -c /etc/mkinitcpio.conf -g /boot/initramfs-linux-fallback.img -S autodetect
[2017-05-27 20:24] [ALPM-SCRIPTLET] ==> Starting build: 4.11.2-1-ARCH
[2017-05-27 20:24] [ALPM-SCRIPTLET]   -> Running build hook: [base]
[2017-05-27 20:24] [ALPM-SCRIPTLET]   -> Running build hook: [udev]
[2017-05-27 20:24] [ALPM-SCRIPTLET]   -> Running build hook: [modconf]
[2017-05-27 20:24] [ALPM-SCRIPTLET]   -> Running build hook: [block]
[2017-05-27 20:24] [ALPM-SCRIPTLET] ==> WARNING: Possibly missing firmware for module: aic94xx
[2017-05-27 20:24] [ALPM-SCRIPTLET] ==> WARNING: Possibly missing firmware for module: wd719x
[2017-05-27 20:24] [ALPM-SCRIPTLET]   -> Running build hook: [filesystems]
[2017-05-27 20:24] [ALPM-SCRIPTLET]   -> Running build hook: [keyboard]
[2017-05-27 20:24] [ALPM-SCRIPTLET]   -> Running build hook: [fsck]
[2017-05-27 20:24] [ALPM-SCRIPTLET] ==> Generating module dependencies
[2017-05-27 20:24] [ALPM-SCRIPTLET] ==> Creating gzip-compressed initcpio image: /boot/initramfs-linux-fallback.img
[2017-05-27 20:24] [ALPM-SCRIPTLET] ==> Image generation successful
[2017-05-27 20:24] [ALPM] running 'glib-compile-schemas.hook'...
[2017-05-27 20:24] [ALPM] running 'gtk-query-immodules-2.0.hook'...
[2017-05-27 20:24] [ALPM] running 'gtk-query-immodules-3.0.hook'...
[2017-05-27 20:24] [ALPM] running 'gtk-update-icon-cache.hook'...
[2017-05-27 20:24] [ALPM] running 'systemd-tmpfiles.hook'...
[2017-05-27 20:24] [ALPM] running 'systemd-update.hook'...
[2017-05-27 20:24] [ALPM] running 'texinfo-install.hook'...
[2017-05-27 20:24] [ALPM] running 'update-desktop-database.hook'...
[2017-05-27 20:24] [ALPM] running 'update-vlc-plugin-cache.hook'...

Offline

#7 2017-05-28 19:31:17

loqs
Member
Registered: 2014-03-06
Posts: 17,192

Re: Pacman upgrade broke sudo

heidegger wrote:

ayekat, I do use enlightenment so there is a big chance that bug is related.  Thanks for the link.

You have not verified this by trying sudo / su outside of enlightenment such as switching to a different terminal?

Offline

#8 2017-05-28 19:38:08

heidegger
Member
Registered: 2013-04-24
Posts: 87

Re: Pacman upgrade broke sudo

loqs, yes sudo does work for my user outside of enlightenment.

I am now looking into how to patch my kernel, which is something I have been able to avoid up until this point.
If anyone has any quick links on how to get this done quickly, I would appreciate it.
But for now, Google....

H.

Offline

#9 2017-05-28 19:42:42

loqs
Member
Registered: 2014-03-06
Posts: 17,192

Re: Pacman upgrade broke sudo

Patching_in_ABS from there follow the links through ABS, makepkg and PKGBUILD.
Edit since the kernel can take a long time to build I recommend also reading Makepkg#MAKEFLAGS to reduce the build time by using all available cores.
The linux package's PKGBUILD includes using a patch already in its prepare function see https://git.archlinux.org/svntogit/pack … 340eb9#n45

Last edited by loqs (2017-05-28 19:50:01)

Offline

#10 2017-05-28 20:22:57

heidegger
Member
Registered: 2013-04-24
Posts: 87

Re: Pacman upgrade broke sudo

loqs, so I will add an additional patch line to the prepare function in addition to the existing?

Offline

#11 2017-05-28 20:25:26

loqs
Member
Registered: 2014-03-06
Posts: 17,192

Re: Pacman upgrade broke sudo

Yes an additional patch line in the prepare function and additional entries in the source and checksum arrays for the patch file.

Offline

#12 2017-05-28 20:50:09

heidegger
Member
Registered: 2013-04-24
Posts: 87

Re: Pacman upgrade broke sudo

I used git to clone the address you provided (https://git.archlinux.org/svntogit/packages.git).
I found the PKGBUILD in the linux subfolder and added the sha256sum of the ptrace patch which I downloaded to my local machine.
I added the following line to the prepare function to reference the local copy.

patch -p1 -i ../../../linux-ptrace-fix.patch 

since I am referencing a local file, I guess I do not need to include additional entries in the source array?

Offline

#13 2017-05-28 20:53:29

heidegger
Member
Registered: 2013-04-24
Posts: 87

Re: Pacman upgrade broke sudo

[camus@camus trunk]$ makepkg
==> Making package: linux 4.11.2-1 (Sun May 28 13:52:16 PDT 2017)
==> Checking runtime dependencies...
==> Checking buildtime dependencies...
==> Retrieving sources...
  -> Downloading linux-4.11.tar.xz...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100 91.0M  100 91.0M    0     0  24.2M      0  0:00:03  0:00:03 --:--:-- 24.2M
  -> Downloading linux-4.11.tar.sign...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   455  100   455    0     0   2080      0 --:--:-- --:--:-- --:--:--  2087
  -> Downloading patch-4.11.2.xz...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100 55484  100 55484    0     0   218k      0 --:--:-- --:--:-- --:--:--  219k
  -> Downloading patch-4.11.2.sign...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   833  100   833    0     0   4702      0 --:--:-- --:--:-- --:--:--  4706
  -> Found config.i686
  -> Found config.x86_64
  -> Found 90-linux.hook
  -> Found linux.preset
==> ERROR: Integrity checks (sha256) differ in size from the source array.
[camus@camus trunk]$

Offline

#14 2017-05-28 20:56:40

heidegger
Member
Registered: 2013-04-24
Posts: 87

Re: Pacman upgrade broke sudo

[camus@camus trunk]$ cat PKGBUILD
# $Id$
# Maintainer: Tobias Powalowski <tpowa@archlinux.org>
# Maintainer: Thomas Baechler <thomas@archlinux.org>

pkgbase=linux               # Build stock -ARCH kernel
#pkgbase=linux-custom       # Build kernel with a different name
_srcname=linux-4.11
pkgver=4.11.2
pkgrel=1
arch=('i686' 'x86_64')
url="https://www.kernel.org/"
license=('GPL2')
makedepends=('xmlto' 'docbook-xsl' 'kmod' 'inetutils' 'bc' 'libelf')
options=('!strip')
source=("https://www.kernel.org/pub/linux/kernel/v4.x/${_srcname}.tar.xz"
        "https://www.kernel.org/pub/linux/kernel/v4.x/${_srcname}.tar.sign"
        "https://www.kernel.org/pub/linux/kernel/v4.x/patch-${pkgver}.xz"
        "https://www.kernel.org/pub/linux/kernel/v4.x/patch-${pkgver}.sign"
        # the main kernel config files
        'config.i686' 'config.x86_64'
        # pacman hook for initramfs regeneration
        '90-linux.hook'
        # standard config files for mkinitcpio ramdisk
        'linux.preset')

sha256sums=('b67ecafd0a42b3383bf4d82f0850cbff92a7e72a215a6d02f42ddbafcf42a7d6'
            'SKIP'
            'df7138c754c95f2c22127d1d76c122dbfe26b0b586572855d9d095f0d112b29b'
            'SKIP'
            'e4e928488d35ba2b4049bd224dee87be9eb574ed3c1882f22c8fd5d8674c9abd'
            '2e38528bd2f1be712f5a274b66882c41d2a9cf996b3a05b4a772c8ba7309b261'
            '834bd254b56ab71d73f59b3221f056c72f559553c04718e350ab2a3e2991afe0'
            '41d39c1b674be4ab4a0f60212057e6e9cb6cb954a54dbffaa081aeeba83c516c'
            'ad6344badc91ad0630caacde83f7f9b97276f80d26a20619a87952be65492c65')
validpgpkeys=(
              'ABAF11C65A2970B130ABE3C479BE3E4300411886' # Linus Torvalds
              '647F28654894E3BD457199BE38DBBDC86092693E' # Greg Kroah-Hartman
             )

_kernelname=${pkgbase#linux}

prepare() {
  cd "${srcdir}/${_srcname}"

  # add upstream patch
  patch -p1 -i "${srcdir}/patch-${pkgver}"
  patch -p1 -i ../../../linux-ptrace-fix.patch

  # add latest fixes from stable queue, if needed
  # http://git.kernel.org/?p=linux/kernel/git/stable/stable-queue.git

  cat "${srcdir}/config.${CARCH}" > ./.config

  if [ "${_kernelname}" != "" ]; then
    sed -i "s|CONFIG_LOCALVERSION=.*|CONFIG_LOCALVERSION=\"${_kernelname}\"|g" ./.config
    sed -i "s|CONFIG_LOCALVERSION_AUTO=.*|CONFIG_LOCALVERSION_AUTO=n|" ./.config
  fi

  # set extraversion to pkgrel
  sed -ri "s|^(EXTRAVERSION =).*|\1 -${pkgrel}|" Makefile

  # don't run depmod on 'make install'. We'll do this ourselves in packaging
  sed -i '2iexit 0' scripts/depmod.sh

  # get kernel version
  make prepare

  # load configuration
  # Configure the kernel. Replace the line below with one of your choice.
  #make menuconfig # CLI menu for configuration
  #make nconfig # new CLI menu for configuration
  #make xconfig # X-based configuration
  #make oldconfig # using old config from previous kernel version
  # ... or manually edit .config

  # rewrite configuration
  yes "" | make config >/dev/null
}

build() {
  cd "${srcdir}/${_srcname}"

  make ${MAKEFLAGS} LOCALVERSION= bzImage modules
}

_package() {
  pkgdesc="The ${pkgbase/linux/Linux} kernel and modules"
  [ "${pkgbase}" = "linux" ] && groups=('base')
  depends=('coreutils' 'linux-firmware' 'kmod' 'mkinitcpio>=0.7')
  optdepends=('crda: to set the correct wireless channels of your country')
  backup=("etc/mkinitcpio.d/${pkgbase}.preset")
  install=linux.install

  cd "${srcdir}/${_srcname}"

  KARCH=x86

  # get kernel version
  _kernver="$(make LOCALVERSION= kernelrelease)"
  _basekernel=${_kernver%%-*}
  _basekernel=${_basekernel%.*}

  mkdir -p "${pkgdir}"/{lib/modules,lib/firmware,boot}
  make LOCALVERSION= INSTALL_MOD_PATH="${pkgdir}" modules_install
  cp arch/$KARCH/boot/bzImage "${pkgdir}/boot/vmlinuz-${pkgbase}"

  # set correct depmod command for install
  sed -e "s|%PKGBASE%|${pkgbase}|g;s|%KERNVER%|${_kernver}|g" \
    "${startdir}/${install}" > "${startdir}/${install}.pkg"
  true && install=${install}.pkg

  # install mkinitcpio preset file for kernel
  sed "s|%PKGBASE%|${pkgbase}|g" "${srcdir}/linux.preset" |
    install -D -m644 /dev/stdin "${pkgdir}/etc/mkinitcpio.d/${pkgbase}.preset"

  # install pacman hook for initramfs regeneration
  sed "s|%PKGBASE%|${pkgbase}|g" "${srcdir}/90-linux.hook" |
    install -D -m644 /dev/stdin "${pkgdir}/usr/share/libalpm/hooks/90-${pkgbase}.hook"

  # remove build and source links
  rm -f "${pkgdir}"/lib/modules/${_kernver}/{source,build}
  # remove the firmware
  rm -rf "${pkgdir}/lib/firmware"
  # make room for external modules
  ln -s "../extramodules-${_basekernel}${_kernelname:--ARCH}" "${pkgdir}/lib/modules/${_kernver}/extramodules"
  # add real version for building modules and running depmod from post_install/upgrade
  mkdir -p "${pkgdir}/lib/modules/extramodules-${_basekernel}${_kernelname:--ARCH}"
  echo "${_kernver}" > "${pkgdir}/lib/modules/extramodules-${_basekernel}${_kernelname:--ARCH}/version"

  # Now we call depmod...
  depmod -b "${pkgdir}" -F System.map "${_kernver}"

  # move module tree /lib -> /usr/lib
  mkdir -p "${pkgdir}/usr"
  mv "${pkgdir}/lib" "${pkgdir}/usr/"

  # add vmlinux
  install -D -m644 vmlinux "${pkgdir}/usr/lib/modules/${_kernver}/build/vmlinux"
}

_package-headers() {
  pkgdesc="Header files and scripts for building modules for ${pkgbase/linux/Linux} kernel"

  install -dm755 "${pkgdir}/usr/lib/modules/${_kernver}"

  cd "${srcdir}/${_srcname}"
  install -D -m644 Makefile \
    "${pkgdir}/usr/lib/modules/${_kernver}/build/Makefile"
  install -D -m644 kernel/Makefile \
    "${pkgdir}/usr/lib/modules/${_kernver}/build/kernel/Makefile"
  install -D -m644 .config \
    "${pkgdir}/usr/lib/modules/${_kernver}/build/.config"

  mkdir -p "${pkgdir}/usr/lib/modules/${_kernver}/build/include"

  for i in acpi asm-generic config crypto drm generated keys linux math-emu \
    media net pcmcia scsi soc sound trace uapi video xen; do
    cp -a include/${i} "${pkgdir}/usr/lib/modules/${_kernver}/build/include/"
  done

  # copy arch includes for external modules
  mkdir -p "${pkgdir}/usr/lib/modules/${_kernver}/build/arch/x86"
  cp -a arch/x86/include "${pkgdir}/usr/lib/modules/${_kernver}/build/arch/x86/"

  # copy files necessary for later builds, like nvidia and vmware
  cp Module.symvers "${pkgdir}/usr/lib/modules/${_kernver}/build"
  cp -a scripts "${pkgdir}/usr/lib/modules/${_kernver}/build"

  # fix permissions on scripts dir
  chmod og-w -R "${pkgdir}/usr/lib/modules/${_kernver}/build/scripts"
  mkdir -p "${pkgdir}/usr/lib/modules/${_kernver}/build/.tmp_versions"

  mkdir -p "${pkgdir}/usr/lib/modules/${_kernver}/build/arch/${KARCH}/kernel"

  cp arch/${KARCH}/Makefile "${pkgdir}/usr/lib/modules/${_kernver}/build/arch/${KARCH}/"

  if [ "${CARCH}" = "i686" ]; then
    cp arch/${KARCH}/Makefile_32.cpu "${pkgdir}/usr/lib/modules/${_kernver}/build/arch/${KARCH}/"
  fi

  cp arch/${KARCH}/kernel/asm-offsets.s "${pkgdir}/usr/lib/modules/${_kernver}/build/arch/${KARCH}/kernel/"

  # add docbook makefile
  install -D -m644 Documentation/DocBook/Makefile \
    "${pkgdir}/usr/lib/modules/${_kernver}/build/Documentation/DocBook/Makefile"

  # add dm headers
  mkdir -p "${pkgdir}/usr/lib/modules/${_kernver}/build/drivers/md"
  cp drivers/md/*.h "${pkgdir}/usr/lib/modules/${_kernver}/build/drivers/md"

  # add inotify.h
  mkdir -p "${pkgdir}/usr/lib/modules/${_kernver}/build/include/linux"
  cp include/linux/inotify.h "${pkgdir}/usr/lib/modules/${_kernver}/build/include/linux/"

  # add wireless headers
  mkdir -p "${pkgdir}/usr/lib/modules/${_kernver}/build/net/mac80211/"
  cp net/mac80211/*.h "${pkgdir}/usr/lib/modules/${_kernver}/build/net/mac80211/"

  # add dvb headers for external modules
  # in reference to:
  # http://bugs.archlinux.org/task/9912
  mkdir -p "${pkgdir}/usr/lib/modules/${_kernver}/build/drivers/media/dvb-core"
  cp drivers/media/dvb-core/*.h "${pkgdir}/usr/lib/modules/${_kernver}/build/drivers/media/dvb-core/"
  # and...
  # http://bugs.archlinux.org/task/11194
  mkdir -p "${pkgdir}/usr/lib/modules/${_kernver}/build/include/config/dvb/"
  cp include/config/dvb/*.h "${pkgdir}/usr/lib/modules/${_kernver}/build/include/config/dvb/"

  # add dvb headers for http://mcentral.de/hg/~mrec/em28xx-new
  # in reference to:
  # http://bugs.archlinux.org/task/13146
  mkdir -p "${pkgdir}/usr/lib/modules/${_kernver}/build/drivers/media/dvb-frontends/"
  cp drivers/media/dvb-frontends/lgdt330x.h "${pkgdir}/usr/lib/modules/${_kernver}/build/drivers/media/dvb-frontends/"
  mkdir -p "${pkgdir}/usr/lib/modules/${_kernver}/build/drivers/media/i2c/"
  cp drivers/media/i2c/msp3400-driver.h "${pkgdir}/usr/lib/modules/${_kernver}/build/drivers/media/i2c/"

  # add dvb headers
  # in reference to:
  # http://bugs.archlinux.org/task/20402
  mkdir -p "${pkgdir}/usr/lib/modules/${_kernver}/build/drivers/media/usb/dvb-usb"
  cp drivers/media/usb/dvb-usb/*.h "${pkgdir}/usr/lib/modules/${_kernver}/build/drivers/media/usb/dvb-usb/"
  mkdir -p "${pkgdir}/usr/lib/modules/${_kernver}/build/drivers/media/dvb-frontends"
  cp drivers/media/dvb-frontends/*.h "${pkgdir}/usr/lib/modules/${_kernver}/build/drivers/media/dvb-frontends/"
  mkdir -p "${pkgdir}/usr/lib/modules/${_kernver}/build/drivers/media/tuners"
  cp drivers/media/tuners/*.h "${pkgdir}/usr/lib/modules/${_kernver}/build/drivers/media/tuners/"

  # add xfs and shmem for aufs building
  mkdir -p "${pkgdir}/usr/lib/modules/${_kernver}/build/fs/xfs"
  mkdir -p "${pkgdir}/usr/lib/modules/${_kernver}/build/mm"
  # removed in 3.17 series
  # cp fs/xfs/xfs_sb.h "${pkgdir}/usr/lib/modules/${_kernver}/build/fs/xfs/xfs_sb.h"

  # copy in Kconfig files
  for i in $(find . -name "Kconfig*"); do
    mkdir -p "${pkgdir}"/usr/lib/modules/${_kernver}/build/`echo ${i} | sed 's|/Kconfig.*||'`
    cp ${i} "${pkgdir}/usr/lib/modules/${_kernver}/build/${i}"
  done

  # add objtool for external module building and enabled VALIDATION_STACK option
  if [ -f tools/objtool/objtool ];  then
      mkdir -p "${pkgdir}/usr/lib/modules/${_kernver}/build/tools/objtool"
      cp -a tools/objtool/objtool ${pkgdir}/usr/lib/modules/${_kernver}/build/tools/objtool/
  fi

  chown -R root.root "${pkgdir}/usr/lib/modules/${_kernver}/build"
  find "${pkgdir}/usr/lib/modules/${_kernver}/build" -type d -exec chmod 755 {} \;

  # strip scripts directory
  find "${pkgdir}/usr/lib/modules/${_kernver}/build/scripts" -type f -perm -u+w 2>/dev/null | while read binary ; do
    case "$(file -bi "${binary}")" in
      *application/x-sharedlib*) # Libraries (.so)
        /usr/bin/strip ${STRIP_SHARED} "${binary}";;
      *application/x-archive*) # Libraries (.a)
        /usr/bin/strip ${STRIP_STATIC} "${binary}";;
      *application/x-executable*) # Binaries
        /usr/bin/strip ${STRIP_BINARIES} "${binary}";;
    esac
  done

  # remove unneeded architectures
  rm -rf "${pkgdir}"/usr/lib/modules/${_kernver}/build/arch/{alpha,arc,arm,arm26,arm64,avr32,blackfin,c6x,cris,frv,h8300,hexagon,ia64,m32r,m68k,m68knommu,metag,mips,microblaze,mn10300,openrisc,parisc,powerpc,ppc,s390,score,sh,sh64,sparc,sparc64,tile,unicore32,um,v850,xtensa}

  # remove a files already in linux-docs package
  rm -f "${pkgdir}/usr/lib/modules/${_kernver}/build/Documentation/kbuild/Kconfig.recursion-issue-01"
  rm -f "${pkgdir}/usr/lib/modules/${_kernver}/build/Documentation/kbuild/Kconfig.recursion-issue-02"
  rm -f "${pkgdir}/usr/lib/modules/${_kernver}/build/Documentation/kbuild/Kconfig.select-break"
}

_package-docs() {
  pkgdesc="Kernel hackers manual - HTML documentation that comes with the ${pkgbase/linux/Linux} kernel"

  cd "${srcdir}/${_srcname}"

  mkdir -p "${pkgdir}/usr/lib/modules/${_kernver}/build"
  cp -al Documentation "${pkgdir}/usr/lib/modules/${_kernver}/build"
  find "${pkgdir}" -type f -exec chmod 444 {} \;
  find "${pkgdir}" -type d -exec chmod 755 {} \;

  # remove a file already in linux package
  rm -f "${pkgdir}/usr/lib/modules/${_kernver}/build/Documentation/DocBook/Makefile"
}

pkgname=("${pkgbase}" "${pkgbase}-headers" "${pkgbase}-docs")
for _p in ${pkgname[@]}; do
  eval "package_${_p}() {
    $(declare -f "_package${_p#${pkgbase}}")
    _package${_p#${pkgbase}}
  }"
done

# vim:set ts=8 sts=2 sw=2 et:
[camus@camus trunk]$
[camus@camus Downloads]$ sha256sum linux-ptrace-fix.patch
41d39c1b674be4ab4a0f60212057e6e9cb6cb954a54dbffaa081aeeba83c516c  linux-ptrace-fix.patch
[camus@camus Downloads]$

Offline

#15 2017-05-28 20:57:56

loqs
Member
Registered: 2014-03-06
Posts: 17,192

Re: Pacman upgrade broke sudo

The error is you added an entry to the sha256sums you should also add it to the sources array.  The source file will then be linked into the src dir and you should reference the patch file relative to the src dir.
Edit:
Something like this

source=("https://www.kernel.org/pub/linux/kernel/v4.x/${_srcname}.tar.xz"
        "https://www.kernel.org/pub/linux/kernel/v4.x/${_srcname}.tar.sign"
        "https://www.kernel.org/pub/linux/kernel/v4.x/patch-${pkgver}.xz"
        "https://www.kernel.org/pub/linux/kernel/v4.x/patch-${pkgver}.sign"
        # the main kernel config files
        'config.i686' 'config.x86_64'
        # pacman hook for initramfs regeneration
        '90-linux.hook'
        'linux-ptrace-fix.patch'
        # standard config files for mkinitcpio ramdisk
        'linux.preset')
  patch -p1 -i "${srcdir}/linux-ptrace-fix.patch"

Last edited by loqs (2017-05-28 21:02:04)

Offline

#16 2017-05-28 21:27:56

heidegger
Member
Registered: 2013-04-24
Posts: 87

Re: Pacman upgrade broke sudo

Afk

Offline

#17 2017-05-28 21:30:17

jasonwryan
Anarchist
From: .nz
Registered: 2009-05-09
Posts: 30,424
Website

Re: Pacman upgrade broke sudo

heidegger wrote:

Afk

Don't do that, this isn't IRC. https://wiki.archlinux.org/index.php/Co … ct#Bumping


Arch + dwm   •   Mercurial repos  •   Surfraw

Registered Linux User #482438

Offline

#18 2017-05-29 05:54:58

heidegger
Member
Registered: 2013-04-24
Posts: 87

Re: Pacman upgrade broke sudo

jasonwryan, my bad.  I had to leave the computer for quite a few hours and didn't want to leave you guys hanging in the middle of our exchange.  The intent wasn't to bump but your point is taken.

loqs, I have made the necessary changes to the makepkg and everything seems to be going well up until this point...

[camus@camus trunk]$ makepkg -C
==> Making package: linux 4.11.2-1 (Sun May 28 22:40:37 PDT 2017)
==> Checking runtime dependencies...
==> Checking buildtime dependencies...
==> Retrieving sources...
  -> Found linux-4.11.tar.xz
  -> Found linux-4.11.tar.sign
  -> Found patch-4.11.2.xz
  -> Found patch-4.11.2.sign
  -> Found config.i686
  -> Found config.x86_64
  -> Found 90-linux.hook
  -> Found linux-ptrace-fix.patch
  -> Found linux.preset
==> Validating source files with sha256sums...
    linux-4.11.tar.xz ... Passed
    linux-4.11.tar.sign ... Skipped
    patch-4.11.2.xz ... Passed
    patch-4.11.2.sign ... Skipped
    config.i686 ... Passed
    config.x86_64 ... Passed
    90-linux.hook ... Passed
    linux-ptrace-fix.patch ... Passed
    linux.preset ... Passed
==> Verifying source file signatures with gpg...
    linux-4.11.tar ... Passed
    patch-4.11.2 ... Passed
==> Removing existing $srcdir/ directory...
==> Extracting sources...
  -> Extracting linux-4.11.tar.xz with bsdtar
  -> Extracting patch-4.11.2.xz with xz
==> Starting prepare()...
patching file Makefile
patching file arch/arm/include/asm/device.h
patching file arch/arm/include/asm/dma-mapping.h
patching file arch/arm/kvm/psci.c
patching file arch/arm/mm/dma-mapping.c
patching file arch/arm64/include/asm/device.h
patching file arch/arm64/include/asm/dma-mapping.h
patching file arch/arm64/include/asm/kvm_emulate.h
patching file arch/arm64/kvm/sys_regs.c
patching file arch/arm64/mm/dma-mapping.c
patching file arch/arm64/net/bpf_jit_comp.c
patching file arch/powerpc/kernel/nvram_64.c
patching file arch/sparc/kernel/head_64.S
patching file arch/sparc/lib/GENbzero.S
patching file arch/sparc/lib/NGbzero.S
patching file arch/x86/boot/boot.h
patching file arch/x86/events/intel/rapl.c
patching file arch/x86/include/asm/pmem.h
patching file arch/x86/include/asm/xen/events.h
patching file arch/x86/kvm/lapic.c
patching file arch/x86/kvm/x86.c
patching file arch/x86/pci/xen.c
patching file arch/x86/um/ptrace_64.c
patching file arch/x86/xen/enlighten.c
patching file arch/x86/xen/mmu.c
patching file arch/x86/xen/smp.c
patching file arch/x86/xen/time.c
patching file block/blk-integrity.c
patching file block/partition-generic.c
patching file crypto/algif_aead.c
patching file drivers/Makefile
patching file drivers/ata/libata-scsi.c
patching file drivers/bluetooth/hci_bcm.c
patching file drivers/bluetooth/hci_intel.c
patching file drivers/char/ipmi/ipmi_ssif.c
patching file drivers/crypto/ccp/ccp-dev-v3.c
patching file drivers/crypto/ccp/ccp-dev-v5.c
patching file drivers/crypto/ccp/ccp-dev.h
patching file drivers/crypto/ccp/ccp-pci.c
patching file drivers/crypto/s5p-sss.c
patching file drivers/dax/dax.c
patching file drivers/gpu/drm/sti/sti_gdp.c
patching file drivers/infiniband/core/device.c
patching file drivers/infiniband/core/sysfs.c
patching file drivers/infiniband/core/verbs.c
patching file drivers/infiniband/hw/hfi1/ruc.c
patching file drivers/infiniband/hw/hfi1/verbs.c
patching file drivers/infiniband/hw/hfi1/verbs.h
patching file drivers/infiniband/hw/mlx4/main.c
patching file drivers/infiniband/hw/mlx4/mcg.c
patching file drivers/infiniband/ulp/ipoib/ipoib_fs.c
patching file drivers/infiniband/ulp/ipoib/ipoib_main.c
patching file drivers/infiniband/ulp/ipoib/ipoib_vlan.c
patching file drivers/md/dm-crypt.c
patching file drivers/md/dm-era-target.c
patching file drivers/md/dm-ioctl.c
patching file drivers/md/dm-rq.c
patching file drivers/md/dm-thin.c
patching file drivers/md/raid1.c
patching file drivers/net/ethernet/broadcom/bnxt/bnxt.c
patching file drivers/net/ethernet/cadence/macb.c
patching file drivers/net/geneve.c
patching file drivers/net/phy/mdio-mux-bcm-iproc.c
patching file drivers/net/usb/qmi_wwan.c
patching file drivers/net/wireless/broadcom/brcm80211/brcmfmac/core.c
patching file drivers/nvdimm/btt_devs.c
patching file drivers/nvdimm/claim.c
patching file drivers/nvdimm/dax_devs.c
patching file drivers/nvdimm/pfn_devs.c
patching file drivers/nvdimm/pmem.c
patching file drivers/nvdimm/region_devs.c
patching file drivers/power/supply/lp8788-charger.c
patching file drivers/staging/comedi/drivers/jr3_pci.c
patching file drivers/staging/gdm724x/gdm_mux.c
patching file drivers/staging/media/lirc/lirc_sir.c
patching file drivers/staging/vt6656/usbpipe.c
patching file drivers/staging/wilc1000/linux_wlan.c
patching file drivers/target/iscsi/iscsi_target.c
patching file drivers/target/iscsi/iscsi_target_configfs.c
patching file drivers/target/iscsi/iscsi_target_login.c
patching file drivers/target/target_core_file.c
patching file drivers/target/target_core_sbc.c
patching file drivers/tty/pty.c
patching file drivers/tty/serial/amba-pl011.c
patching file drivers/tty/serial/omap-serial.c
patching file drivers/tty/serial/samsung.c
patching file drivers/usb/class/cdc-wdm.c
patching file drivers/usb/core/driver.c
patching file drivers/usb/core/file.c
patching file drivers/usb/core/hub.c
patching file drivers/usb/gadget/Kconfig
patching file drivers/usb/host/xhci-mem.c
patching file drivers/usb/host/xhci-pci.c
patching file drivers/usb/host/xhci.h
patching file drivers/usb/misc/usbtest.c
patching file drivers/usb/serial/ftdi_sio.c
patching file drivers/usb/serial/ftdi_sio_ids.h
patching file drivers/vfio/vfio_iommu_type1.c
patching file drivers/xen/events/events_base.c
patching file drivers/xen/platform-pci.c
patching file fs/block_dev.c
patching file fs/ceph/xattr.c
patching file fs/cifs/cifs_unicode.c
patching file fs/cifs/cifs_unicode.h
patching file fs/cifs/cifsfs.c
patching file fs/cifs/cifsglob.h
patching file fs/cifs/cifssmb.c
patching file fs/cifs/connect.c
patching file fs/cifs/ioctl.c
patching file fs/cifs/misc.c
patching file fs/cifs/smb2misc.c
patching file fs/cifs/smb2ops.c
patching file fs/cifs/smb2pdu.c
patching file fs/crypto/fname.c
patching file fs/crypto/policy.c
patching file fs/dax.c
patching file fs/ext4/file.c
patching file fs/ext4/inode.c
patching file fs/ext4/namei.c
patching file fs/f2fs/data.c
patching file fs/f2fs/dir.c
patching file fs/f2fs/f2fs.h
patching file fs/f2fs/gc.c
patching file fs/f2fs/hash.c
patching file fs/f2fs/inline.c
patching file fs/f2fs/inode.c
patching file fs/f2fs/namei.c
patching file fs/f2fs/segment.c
patching file fs/f2fs/super.c
patching file fs/iomap.c
patching file fs/jbd2/journal.c
patching file fs/orangefs/inode.c
patching file fs/orangefs/namei.c
patching file fs/orangefs/xattr.c
patching file fs/overlayfs/dir.c
patching file fs/pstore/platform.c
patching file fs/pstore/ram_core.c
patching file fs/xattr.c
patching file include/linux/dax.h
patching file include/linux/f2fs_fs.h
patching file include/linux/genhd.h
patching file include/linux/kvm_host.h
patching file include/linux/memcontrol.h
patching file include/linux/mmzone.h
patching file include/net/addrconf.h
patching file include/net/ip6_route.h
patching file include/net/secure_seq.h
patching file include/net/tcp.h
patching file include/xen/arm/page-coherent.h
patching file init/initramfs.c
patching file kernel/bpf/verifier.c
patching file kernel/cgroup/cgroup.c
patching file kernel/padata.c
patching file lib/refcount.c
patching file lib/test_bpf.c
patching file mm/filemap.c
patching file mm/memcontrol.c
patching file mm/page_alloc.c
patching file mm/truncate.c
patching file mm/vmscan.c
patching file mm/workingset.c
patching file net/bluetooth/hci_sock.c
patching file net/core/datagram.c
patching file net/core/rtnetlink.c
patching file net/core/secure_seq.c
patching file net/ipv4/raw.c
patching file net/ipv4/syncookies.c
patching file net/ipv4/tcp.c
patching file net/ipv4/tcp_input.c
patching file net/ipv4/tcp_ipv4.c
patching file net/ipv4/tcp_lp.c
patching file net/ipv4/tcp_minisocks.c
patching file net/ipv6/addrconf.c
patching file net/ipv6/raw.c
patching file net/ipv6/route.c
patching file net/ipv6/syncookies.c
patching file net/ipv6/tcp_ipv6.c
patching file tools/perf/arch/s390/annotate/instructions.c
patching file tools/perf/util/annotate.c
patching file tools/perf/util/auxtrace.c
patching file tools/testing/selftests/bpf/test_verifier.c
patching file tools/testing/selftests/x86/ldt_gdt.c
patching file virt/kvm/kvm_main.c
can't find file to patch at input line 5
Perhaps you used the wrong -p or --strip option?
The text leading up to this was:
--------------------------
|diff --git a/trunk/PKGBUILD b/trunk/PKGBUILD
|index 8a49d16..7004072 100644
|--- a/trunk/PKGBUILD
|+++ b/trunk/PKGBUILD
--------------------------
File to patch:

I don't know what the correct answer to this query is.  I can say that the text shown as "leading up to this point" is from the linux-ptrace-fix.patch file that I am trying to patch kernel with.
I'm sure there is some fundamental aspect of patching a kernel here that I am missing.  I wouldn't want to instruct it to patch the PKGBUILD file would I? I already edited that file to include this patch.

Last edited by heidegger (2017-05-29 05:55:53)

Offline

#19 2017-05-29 07:25:53

loqs
Member
Registered: 2014-03-06
Posts: 17,192

Re: Pacman upgrade broke sudo

https://bugs.archlinux.org/task/54170?getfile=15254 is

diff --git a/trunk/PKGBUILD b/trunk/PKGBUILD
index 8a49d16..7004072 100644
--- a/trunk/PKGBUILD
+++ b/trunk/PKGBUILD
@@ -21,7 +21,10 @@ source=("https://www.kernel.org/pub/linux/kernel/v4.x/${_srcname}.tar.xz"
         # pacman hook for initramfs regeneration
         '90-linux.hook'
         # standard config files for mkinitcpio ramdisk
-        'linux.preset')
+        'linux.preset'
+        # Patch for ptrace on Linux 4.11.2 so Enlightenment works
+        'linux-4.11.2-ptrace.patch'
+        )
 
 sha256sums=('b67ecafd0a42b3383bf4d82f0850cbff92a7e72a215a6d02f42ddbafcf42a7d6'
             'SKIP'
@@ -30,7 +33,8 @@ sha256sums=('b67ecafd0a42b3383bf4d82f0850cbff92a7e72a215a6d02f42ddbafcf42a7d6'
             'e4e928488d35ba2b4049bd224dee87be9eb574ed3c1882f22c8fd5d8674c9abd'
             '2e38528bd2f1be712f5a274b66882c41d2a9cf996b3a05b4a772c8ba7309b261'
             '834bd254b56ab71d73f59b3221f056c72f559553c04718e350ab2a3e2991afe0'
-            'ad6344badc91ad0630caacde83f7f9b97276f80d26a20619a87952be65492c65')
+            'ad6344badc91ad0630caacde83f7f9b97276f80d26a20619a87952be65492c65'
+            'f76aa9ebefa25b17e0262b076ea0c524adb01da12c3c7f91f7481cb418a26aaf')
 validpgpkeys=(
               'ABAF11C65A2970B130ABE3C479BE3E4300411886' # Linus Torvalds
               '647F28654894E3BD457199BE38DBBDC86092693E' # Greg Kroah-Hartman
@@ -44,6 +48,9 @@ prepare() {
   # add upstream patch
   patch -p1 -i "${srcdir}/patch-${pkgver}"
 
+  # Add ptrace patch
+  patch -p1 -i "${srcdir}/linux-4.11.2-ptrace.patch"
+
   # add latest fixes from stable queue, if needed
   # http://git.kernel.org/?p=linux/kernel/git/stable/stable-queue.git
 
diff --git a/trunk/linux-4.11.2-ptrace.patch b/trunk/linux-4.11.2-ptrace.patch
new file mode 100644
index 0000000..7d9995f
--- /dev/null
+++ b/trunk/linux-4.11.2-ptrace.patch
@@ -0,0 +1,113 @@
+From: "Eric W. Biederman" <ebiederm@xmission.com>
+Date: Mon, 22 May 2017 16:04:48 -0500
+Subject: [PATCH] ptrace: Properly initialize ptracer_cred on fork
+Message-ID: <877f18txfz.fsf_-_@xmission.com>
+Patch-mainline: Submitted, LKML
+References: bsc#1040041
+
+When I introduced ptracer_cred I failed to consider the weirdness of
+fork where the task_struct copies the old value by default.  This
+winds up leaving ptracer_cred set even when a process forks and
+the child process does not wind up being ptraced.
+
+Because ptracer_cred is not set on non-ptraced processes whose
+parents were ptraced this has broken the ability of the enlightenment
+window manager to start setuid children.
+
+Fix this by properly initializing ptracer_cred in ptrace_init_task
+
+This must be done with a little bit of care to preserve the current value
+of ptracer_cred when ptrace carries through fork.  Re-reading the
+ptracer_cred from the ptracing process at this point is inconsistent
+with how PT_PTRACE_CAP has been maintained all of these years.
+
+Fixes: 64b875f7ac8a ("ptrace: Capture the ptracer's creds not PT_PTRACE_CAP")
+Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
+Signed-off-by: Takashi Iwai <tiwai@suse.de>
+
+---
+ include/linux/ptrace.h |    7 +++++--
+ kernel/ptrace.c        |   20 +++++++++++++-------
+ 2 files changed, 18 insertions(+), 9 deletions(-)
+
+--- a/include/linux/ptrace.h
++++ b/include/linux/ptrace.h
+@@ -54,7 +54,8 @@ extern int ptrace_request(struct task_st
+ 			  unsigned long addr, unsigned long data);
+ extern void ptrace_notify(int exit_code);
+ extern void __ptrace_link(struct task_struct *child,
+-			  struct task_struct *new_parent);
++			  struct task_struct *new_parent,
++			  const struct cred *ptracer_cred);
+ extern void __ptrace_unlink(struct task_struct *child);
+ extern void exit_ptrace(struct task_struct *tracer, struct list_head *dead);
+ #define PTRACE_MODE_READ	0x01
+@@ -206,7 +207,7 @@ static inline void ptrace_init_task(stru
+ 
+ 	if (unlikely(ptrace) && current->ptrace) {
+ 		child->ptrace = current->ptrace;
+-		__ptrace_link(child, current->parent);
++		__ptrace_link(child, current->parent, current->ptracer_cred);
+ 
+ 		if (child->ptrace & PT_SEIZED)
+ 			task_set_jobctl_pending(child, JOBCTL_TRAP_STOP);
+@@ -215,6 +216,8 @@ static inline void ptrace_init_task(stru
+ 
+ 		set_tsk_thread_flag(child, TIF_SIGPENDING);
+ 	}
++	else
++		child->ptracer_cred = NULL;
+ }
+ 
+ /**
+--- a/kernel/ptrace.c
++++ b/kernel/ptrace.c
+@@ -60,19 +60,25 @@ int ptrace_access_vm(struct task_struct
+ }
+ 
+ 
++void __ptrace_link(struct task_struct *child, struct task_struct *new_parent,
++		   const struct cred *ptracer_cred)
++{
++	BUG_ON(!list_empty(&child->ptrace_entry));
++	list_add(&child->ptrace_entry, &new_parent->ptraced);
++	child->parent = new_parent;
++	child->ptracer_cred = get_cred(ptracer_cred);
++}
++
+ /*
+  * ptrace a task: make the debugger its new parent and
+  * move it to the ptrace list.
+  *
+  * Must be called with the tasklist lock write-held.
+  */
+-void __ptrace_link(struct task_struct *child, struct task_struct *new_parent)
++static void ptrace_link(struct task_struct *child, struct task_struct *new_parent)
+ {
+-	BUG_ON(!list_empty(&child->ptrace_entry));
+-	list_add(&child->ptrace_entry, &new_parent->ptraced);
+-	child->parent = new_parent;
+ 	rcu_read_lock();
+-	child->ptracer_cred = get_cred(__task_cred(new_parent));
++	__ptrace_link(child, new_parent, __task_cred(new_parent));
+ 	rcu_read_unlock();
+ }
+ 
+@@ -386,7 +392,7 @@ static int ptrace_attach(struct task_str
+ 		flags |= PT_SEIZED;
+ 	task->ptrace = flags;
+ 
+-	__ptrace_link(task, current);
++	ptrace_link(task, current);
+ 
+ 	/* SEIZE doesn't trap tracee on attach */
+ 	if (!seize)
+@@ -459,7 +465,7 @@ static int ptrace_traceme(void)
+ 		 */
+ 		if (!ret && !(current->real_parent->flags & PF_EXITING)) {
+ 			current->ptrace = PT_PTRACED;
+-			__ptrace_link(current, current->real_parent);
++			ptrace_link(current, current->real_parent);
+ 		}
+ 	}
+ 	write_unlock_irq(&tasklist_lock);

Note it includes a patch to alter the PKGBUILD which you have already done and patching the PKGBUILD from within makepkg makes no sense.
You want this patch https://bugzilla.suse.com/attachment.cgi?id=726016

From: "Eric W. Biederman" <ebiederm@xmission.com>
Date: Mon, 22 May 2017 16:04:48 -0500
Subject: [PATCH] ptrace: Properly initialize ptracer_cred on fork
Message-ID: <877f18txfz.fsf_-_@xmission.com>
Patch-mainline: Submitted, LKML
References: bsc#1040041

When I introduced ptracer_cred I failed to consider the weirdness of
fork where the task_struct copies the old value by default.  This
winds up leaving ptracer_cred set even when a process forks and
the child process does not wind up being ptraced.

Because ptracer_cred is not set on non-ptraced processes whose
parents were ptraced this has broken the ability of the enlightenment
window manager to start setuid children.

Fix this by properly initializing ptracer_cred in ptrace_init_task

This must be done with a little bit of care to preserve the current value
of ptracer_cred when ptrace carries through fork.  Re-reading the
ptracer_cred from the ptracing process at this point is inconsistent
with how PT_PTRACE_CAP has been maintained all of these years.

Fixes: 64b875f7ac8a ("ptrace: Capture the ptracer's creds not PT_PTRACE_CAP")
Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
Signed-off-by: Takashi Iwai <tiwai@suse.de>

---
 include/linux/ptrace.h |    7 +++++--
 kernel/ptrace.c        |   20 +++++++++++++-------
 2 files changed, 18 insertions(+), 9 deletions(-)

--- a/include/linux/ptrace.h
+++ b/include/linux/ptrace.h
@@ -54,7 +54,8 @@ extern int ptrace_request(struct task_st
 			  unsigned long addr, unsigned long data);
 extern void ptrace_notify(int exit_code);
 extern void __ptrace_link(struct task_struct *child,
-			  struct task_struct *new_parent);
+			  struct task_struct *new_parent,
+			  const struct cred *ptracer_cred);
 extern void __ptrace_unlink(struct task_struct *child);
 extern void exit_ptrace(struct task_struct *tracer, struct list_head *dead);
 #define PTRACE_MODE_READ	0x01
@@ -206,7 +207,7 @@ static inline void ptrace_init_task(stru
 
 	if (unlikely(ptrace) && current->ptrace) {
 		child->ptrace = current->ptrace;
-		__ptrace_link(child, current->parent);
+		__ptrace_link(child, current->parent, current->ptracer_cred);
 
 		if (child->ptrace & PT_SEIZED)
 			task_set_jobctl_pending(child, JOBCTL_TRAP_STOP);
@@ -215,6 +216,8 @@ static inline void ptrace_init_task(stru
 
 		set_tsk_thread_flag(child, TIF_SIGPENDING);
 	}
+	else
+		child->ptracer_cred = NULL;
 }
 
 /**
--- a/kernel/ptrace.c
+++ b/kernel/ptrace.c
@@ -60,19 +60,25 @@ int ptrace_access_vm(struct task_struct
 }
 
 
+void __ptrace_link(struct task_struct *child, struct task_struct *new_parent,
+		   const struct cred *ptracer_cred)
+{
+	BUG_ON(!list_empty(&child->ptrace_entry));
+	list_add(&child->ptrace_entry, &new_parent->ptraced);
+	child->parent = new_parent;
+	child->ptracer_cred = get_cred(ptracer_cred);
+}
+
 /*
  * ptrace a task: make the debugger its new parent and
  * move it to the ptrace list.
  *
  * Must be called with the tasklist lock write-held.
  */
-void __ptrace_link(struct task_struct *child, struct task_struct *new_parent)
+static void ptrace_link(struct task_struct *child, struct task_struct *new_parent)
 {
-	BUG_ON(!list_empty(&child->ptrace_entry));
-	list_add(&child->ptrace_entry, &new_parent->ptraced);
-	child->parent = new_parent;
 	rcu_read_lock();
-	child->ptracer_cred = get_cred(__task_cred(new_parent));
+	__ptrace_link(child, new_parent, __task_cred(new_parent));
 	rcu_read_unlock();
 }
 
@@ -386,7 +392,7 @@ static int ptrace_attach(struct task_str
 		flags |= PT_SEIZED;
 	task->ptrace = flags;
 
-	__ptrace_link(task, current);
+	ptrace_link(task, current);
 
 	/* SEIZE doesn't trap tracee on attach */
 	if (!seize)
@@ -459,7 +465,7 @@ static int ptrace_traceme(void)
 		 */
 		if (!ret && !(current->real_parent->flags & PF_EXITING)) {
 			current->ptrace = PT_PTRACED;
-			__ptrace_link(current, current->real_parent);
+			ptrace_link(current, current->real_parent);
 		}
 	}
 	write_unlock_irq(&tasklist_lock);

Offline

Board footer

Powered by FluxBB