Add /usr/bin/qemu-arm-binfmt to ASLR exception list 75/254175/2 accepted/tizen/unified/20210303.130740 submit/tizen/20210224.113532 submit/tizen/20210225.014619 submit/tizen/20210302.013708
authorINSUN PYO <insun.pyo@samsung.com>
Wed, 24 Feb 2021 09:19:51 +0000 (18:19 +0900)
committerJin-gyu Kim <jin-gyu.kim@samsung.com>
Wed, 24 Feb 2021 11:13:39 +0000 (11:13 +0000)
/usr/bin/qemu-arm-binfmt is linked to /usr/bin/qemu-arm on mic-bootstrap.
(http://download.tizen.org/snapshots/tizen/unified/tizen-unified_20210223.1/repos/standard/packages/armv7l/mic-bootstrap-x86-arm-1.0-10.17.armv7l.rpm)

Sometime local mic fails with mic error message. (Ubuntu 18.04 latest, mic 0.28.12)
===========================================================================================
[02/24 16:52:12 KST] #################### generic-security.post ####################
[02/24 16:52:12 KST] Give capabilities to daemons via set_capability from security-config package
[02/24 16:52:20 KST] Run security-test
[02/24 16:52:31 KST] /opt/share/security-config/test/image_test.sh: line 26: /bin/cat: Permission denied
[02/24 16:52:31 KST] /opt/share/security-config/test/image_test.sh: line 86: /bin/cat: Permission denied
[02/24 16:52:31 KST] /tmp/ks-postscript-yPaRp7: line 298: /bin/security-manager-cmd: Permission denied
[02/24 16:52:31 KST] #################### generic-dbus-policychecker.post ####################
[02/24 16:52:31 KST]
[02/24 16:52:31 KST] /tmp/ks-postscript-yPaRp7: Checking D-Bus policy file: /etc/dbus-1/system.d/alarm-service.conf
[02/24 16:52:31 KST] /tmp/ks-postscript-yPaRp7: /usr/bin/dbuspolicy-checker: /bin/sh: bad interpreter: Permission denied
[02/24 16:52:31 KST] /tmp/ks-postscript-yPaRp7: line 309: /bin/wc: Permission denied
[02/24 16:52:31 KST] /tmp/ks-postscript-yPaRp7: line 309: /bin/grep: Permission denied
[02/24 16:52:31 KST]
[02/24 16:52:31 KST] /tmp/ks-postscript-yPaRp7: line 311: [: -gt: unary operator expected
===========================================================================================

sh-3.2# cat /opt/share/security-config/test/log/aslr_not_applied_files
/usr/bin/protoc
/usr/bin/qemu-arm-binfmt
/usr/sbin/glibc_post_upgrade
/usr/sbin/ldconfig

sh-3.2# cat /opt/share/security-config/test/log/aslr_test_tmpfile
/usr/bin/protoc
/usr/bin/qemu-arm
/usr/bin/qemu-arm-binfmt
/usr/sbin/glibc_post_upgrade
/usr/sbin/ldconfig

sh-3.2# cat /opt/share/security-config/test/log/image_test_log
         ASLR not applied list ######

Change-Id: I488ab3a8e24e2ee94b74ac1cb8ed2af46fe98677

test/aslr_test/scripts/aslr_exception.list

index 3a4769e1865c573fd53339a6f427103f268cba8e..a13289d10c7aca1c5c7db2c8357c78ad515e0f18 100644 (file)
@@ -1,2 +1,3 @@
 /usr/sbin/ldconfig
 /usr/sbin/glibc_post_upgrade
+/usr/bin/qemu-arm-binfmt
\ No newline at end of file