Page 1 of 1

Fatdog901 pflask bug

Posted: Thu Nov 02, 2023 5:06 pm
by fatdoguser

Fatdog 901 has the same /usr/bin/pflask version as 813, but they are different file sizes and the (smaller) Fatdog 901 version doesn't work correctly

In Fatdog 901

Code: Select all

pflask --caps=-sys_chroot

and within that

Code: Select all

chroot / 

... and you're still permitted to chroot

In Fatdog 813 you correctly get a Operation Not Permitted

Dropping a copy of Fatdog 813 /usr/bin/pflask binary into Fatdog 901 fixes the issue but that obviously isn't ideal.


Re: Fatdog901 pflask bug

Posted: Fri Nov 03, 2023 9:10 am
by jamesbond

@fatdoguser thank you for reporting.
Pflask in 814 was built and linked with libcap-ng, in 901 it wasn't.
I've rebuilt it. Pflask now uses and depends on libcap-ng (as it should be).
You can uninstall the built-in pflask and re-install from the gslapt repo.


Re: Fatdog901 pflask bug

Posted: Fri Nov 03, 2023 10:14 am
by fatdoguser

Thanks @jamesbond

But you missed a bit :shock: :thumbdown: ;)

Rather than 'Reinstall' in gslapt I used the Remove option and that ran fine. Then opting for Install and that presents a error "Failed to download pflask: MD5 checksum mismatch, override with --no-md5"


Re: Fatdog901 pflask bug

Posted: Fri Nov 03, 2023 10:34 am
by jamesbond

Ah you're too fast for me :D

Perhaps you tried to access the repo when the index was still rebuilding after the upload.
Please re-update gslapt, and the install again.
I just tested, it installs fine here. :thumbup2:

If gslapt refuses to update then clear slapt-get cache by deleting all files in /var/slapt-get (including the hidden files); then run update again.

Don't forget to make sure you have libcap-ng installed.


Re: Fatdog901 pflask bug

Posted: Fri Nov 03, 2023 10:49 am
by fatdoguser

@jamesbond

Installed pflask from gslapt, tested drop chroot capabilities and works :D

Thanks. :thumbup2: