Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.bugs.dist > #1245562
| From | Lloyd <ng2d68@proton.me> |
|---|---|
| Newsgroups | linux.debian.bugs.dist |
| Subject | Bug#1104616: Backporting trixie mini-httpd |
| Date | 2025-05-11 08:10 +0200 |
| Message-ID | <KL82R-2gev-1@gated-at.bofh.it> (permalink) |
| References | <KKVyF-27PF-5@gated-at.bofh.it> <KKWuK-28sN-3@gated-at.bofh.it> <KL82R-2gev-3@gated-at.bofh.it> <KI9Rv-leC-1@gated-at.bofh.it> <KL82R-2gev-3@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
Alexandru Mihail wrote:
> Therefore, I recommend the source route and I'll give you all
> instructions, works on a fresh stable VM. Hope this solves your issue
> Lloyd :D (until perhaps you update to trixie when it comes out)
Hi Alex - thanks for the helpful info and detailed instructions!
I was able to easily build the package; but, the service would not
start. Several hours later I was able to identify the root cause.
Unfortunately, it appears I uncovered a new bug. :(
I run mini-httpd in chroot mode. The new systemd unit file in the
latest release explicitly blacklists chroot syscall via the @mount
syscall filter group. I've provided a patch below. However, for
clarity's sake I think it's best I resolve this bug and open a new
one.
Regards
Lloyd
--- mini-httpd.service.default
+++ mini-httpd.service.modified
@@ -14,7 +14,7 @@
ProtectSystem=full
CapabilityBoundingSet=~CAP_BPF CAP_LINUX_IMMUTABLE CAP_IPC_LOCK CAP_SYS_TTY_CONFIG \
CAP_SYS_BOOT CAP_MAC_* CAP_SYS_NICE CAP_SYS_RESOURCE CAP_SYS_PTRACE
-SystemCallFilter=~@clock @cpu-emulation @debug @module @mount @obsolete @reboot @raw-io
+SystemCallFilter=~@clock @cpu-emulation @debug @module @obsolete @reboot @raw-io
RestrictNamespaces=~uts ipc pid user cgroup
ProtectKernelTunables=yes
ProtectKernelModules=yes
@@ -27,4 +27,4 @@
LockPersonality=yes
Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Bug#1104616: Backporting trixie mini-httpd Lloyd <ng2d68@proton.me> - 2025-05-10 18:50 +0200
Bug#1104616: Backporting trixie mini-httpd Alexandru Mihail <alexandru.mihail2897@gmail.com> - 2025-05-10 19:50 +0200
Bug#1104616: Backporting trixie mini-httpd Lloyd <ng2d68@proton.me> - 2025-05-11 08:10 +0200
Bug#1104616: Backporting trixie mini-httpd Alexandru Mihail <alexandru.mihail2897@gmail.com> - 2025-05-11 11:50 +0200
Bug#1104616: Backporting trixie mini-httpd Alexandru Mihail <alexandru.mihail2897@gmail.com> - 2025-05-11 12:00 +0200
Bug#1104616: Backporting trixie mini-httpd Lloyd <ng2d68@proton.me> - 2025-05-11 23:30 +0200
csiph-web