[Bug 1712038] Re: ubuntu_qrt_kernel_security test_060_nx failed on Trusty ARM64
Looks like this issue does not exist anymore. Tested on an ARM64 node with Trusty kernel: test_060_nx (__main__.KernelSecurityTest) NX bit is working ... (skipped: ARM64 older than 4.4 used to have READ_IMPLIES_EXEC personality set, but no longer?) ok ** Changed in: qa-regression-testing Status: In Progress => Fix Released ** Changed in: ubuntu-kernel-tests Status: New => Fix Released ** Changed in: linux (Ubuntu) Status: Incomplete => Invalid -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1712038 Title: ubuntu_qrt_kernel_security test_060_nx failed on Trusty ARM64 To manage notifications about this bug go to: https://bugs.launchpad.net/qa-regression-testing/+bug/1712038/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1712038] Re: ubuntu_qrt_kernel_security test_060_nx failed on Trusty ARM64
** Also affects: ubuntu-kernel-tests Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1712038 Title: ubuntu_qrt_kernel_security test_060_nx failed on Trusty ARM64 To manage notifications about this bug go to: https://bugs.launchpad.net/qa-regression-testing/+bug/1712038/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1712038] Re: ubuntu_qrt_kernel_security test_060_nx failed on Trusty ARM64
Hi Steve, do you need any other information for this? Thanks -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1712038 Title: ubuntu_qrt_kernel_security test_060_nx failed on Trusty ARM64 To manage notifications about this bug go to: https://bugs.launchpad.net/qa-regression-testing/+bug/1712038/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1712038] Re: ubuntu_qrt_kernel_security test_060_nx failed on Trusty ARM64
Hi Steve, the result is: ubuntu@ms10-34-mcdivittB0-kernel:~$ cat /proc/self/personality 0040 ubuntu@ms10-34-mcdivittB0-kernel:~$ uname -a Linux ms10-34-mcdivittB0-kernel 3.13.0-146-generic #195-Ubuntu SMP Tue Apr 24 14:56:21 UTC 2018 aarch64 aarch64 aarch64 GNU/Linux -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1712038 Title: ubuntu_qrt_kernel_security test_060_nx failed on Trusty ARM64 To manage notifications about this bug go to: https://bugs.launchpad.net/qa-regression-testing/+bug/1712038/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1712038] Re: ubuntu_qrt_kernel_security test_060_nx failed on Trusty ARM64
Hi Po-Hsu, Sorry this has taken so long to get on my radar. On a trusty arm64 system, can you report on the output of /proc/self/personality? At one point, IIRC, it was setting itself to READ_IMPLIES_EXEC, which caused the ./nx-test executions to succeed when they should have SIGSEGV'ed (exiting with return code -11/139). For the read-implies-exec cases (nx-test-rie), stack and other data segments are marked as executable as well, so those should succeed. I will go ahead and mark arm64 as expecting normal results non- executable data segments in QRT, and we can see what breaks there. Thanks! ** Changed in: qa-regression-testing Status: New => In Progress ** Changed in: qa-regression-testing Assignee: (unassigned) => Steve Beattie (sbeattie) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1712038 Title: ubuntu_qrt_kernel_security test_060_nx failed on Trusty ARM64 To manage notifications about this bug go to: https://bugs.launchpad.net/qa-regression-testing/+bug/1712038/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1712038] Re: ubuntu_qrt_kernel_security test_060_nx failed on Trusty ARM64
** Summary changed: - ubuntu_qrt_kernel_security test_060_nx failed on arm64 + ubuntu_qrt_kernel_security test_060_nx failed on Trusty ARM64 ** Also affects: linux (Ubuntu) Importance: Undecided Status: New ** Tags added: trusty ** Description changed: - For this test, it looks like it should be skipped (3.13 kernel) - - test_060_nx (__main__.KernelSecurityTest) - NX bit is working ... (skipped: ARM64 older than 4.4 has READ_IMPLIES_EXEC personality set) FAIL - - But this test return FAIL instead. - - Digging down into the test case itself, those nx-test test cases (except - mmap-exec) will fail with return code 139 - - self.assertShellExitEquals(expected, ["./nx-test", "data"]) - self.assertShellExitEquals(expected, ["./nx-test", "bss"]) - self.assertShellExitEquals(stack_expected, ["./nx-test", "stack"]) - self.assertShellExitEquals(expected, ["./nx-test", "brk"]) - self.assertShellExitEquals(expected, ["./nx-test", "mmap"]) - - Also, those nx-test-rie tests will return 0 even if it's saying that - this is "unexpected" - - self.assertShellExitEquals(0, ["./nx-test-rie", "mmap-exec"]) - self.assertShellExitEquals(0, ["./nx-test-rie", "stack"]) - self.assertShellExitEquals(rie_expected, ["./nx-test-rie", "data"]) - self.assertShellExitEquals(rie_expected, ["./nx-test-rie", "bss"]) - self.assertShellExitEquals(rie_expected, ["./nx-test-rie", "brk"]) - self.assertShellExitEquals(rie_expected, ["./nx-test-rie", "mmap"]) - - $ sudo ./nx-test-rie brk - rodata:0x4010c0 - data: 0x4120a8 - bss: 0x4220c8 - brk: 0x1542b020 - rw:0x7fa72a5000 - rwx: 0x7fa72a4000 - stack: 0x7ff0364f78 - Dump of /proc/self/maps: - 0040-00402000 r-xp 08:02 10228068 /home/ubuntu/qa-regression-testing/scripts/kernel-security/nx/nx-test-rie - 00411000-00412000 r-xp 1000 08:02 10228068 /home/ubuntu/qa-regression-testing/scripts/kernel-security/nx/nx-test-rie - 00412000-00413000 rwxp 2000 08:02 10228068 /home/ubuntu/qa-regression-testing/scripts/kernel-security/nx/nx-test-rie - 00413000-00423000 rwxp 00:00 0 - 1542a000-1544c000 rwxp 00:00 0 [heap] - 7fa7112000-7fa7132000 rwxp 00:00 0 - 7fa7132000-7fa7265000 r-xp 08:02 262398 /lib/aarch64-linux-gnu/libc-2.19.so - 7fa7265000-7fa7275000 ---p 00133000 08:02 262398 /lib/aarch64-linux-gnu/libc-2.19.so - 7fa7275000-7fa7279000 r-xp 00133000 08:02 262398 /lib/aarch64-linux-gnu/libc-2.19.so - 7fa7279000-7fa727b000 rwxp 00137000 08:02 262398 /lib/aarch64-linux-gnu/libc-2.19.so - 7fa727b000-7fa727f000 rwxp 00:00 0 - 7fa727f000-7fa729b000 r-xp 08:02 262387 /lib/aarch64-linux-gnu/ld-2.19.so - 7fa729e000-7fa72a rwxp 00:00 0 - 7fa72a4000-7fa72a8000 rwxp 00:00 0 - 7fa72a8000-7fa72aa000 r-xp 00:00 0 [vdso] - 7fa72aa000-7fa72ab000 r-xp 0001b000 08:02 262387 /lib/aarch64-linux-gnu/ld-2.19.so - 7fa72ab000-7fa72ad000 rwxp 0001c000 08:02 262387 /lib/aarch64-linux-gnu/ld-2.19.so - 7ff0345000-7ff0366000 rwxp 00:00 0 [stack] - Attempting to execute function at 0x1542a010 - If this program seg-faults, the region was enforced as non-executable... - Unexpected: returned from function that was marked non-executable. - NX segment markings are not being enforced. + FAIL: test_060_nx (__main__.KernelSecurityTest) + NX bit is working + -- + Traceback (most recent call last): +File "./test-kernel-security.py", line 460, in test_060_nx + self.assertShellExitEquals(expected, ["./nx-test", "data"]) +File "/home/ubuntu/autotest/client/tmp/ubuntu_qrt_kernel_security/src/qa-regression-testing/scripts/testlib.py", line 1134, in assertShellExitEquals + self.assertEqual(expected, rc, msg + result + report) + AssertionError: Got exit code -11, expected 0 + Command: './nx-test', 'data' + Output: + rodata:0x4010c0 + data: 0x4120a8 + bss: 0x4220c8 + brk: 0x20de1010 + rw:0x7f833a1000 + rwx: 0x7f833a + stack: 0x7fdd19bfd8 + Dump of /proc/self/maps: + 0040-00402000 r-xp 08:02 10096524 /home/ubuntu/autotest/client/tmp/ubuntu_qrt_kernel_security/src/qa-regression-testing/scripts/kernel-security/nx/nx-test + 00411000-00412000 r--p 1000 08:02 10096524 /home/ubuntu/autotest/client/tmp/ubuntu_qrt_kernel_security/src/qa-regression-testing/scripts/kernel-security/nx/nx-test + 00412000-00413000 rw-p 2000 08:02 10096524
