lua os.execute fails after Centos 7.3 update (21-Jun-2017)
Hello, Due to the recent security issues I did an update to my centos 7.3 system which runs Freeswitch 1.6.17/18 (two systems); The main packages updated were the kernel and Libc. Since then, os.execute stopped working inside lua called scripts (luarun api); they fail with error 32512 which means that the command is not available. However, before the upgrade it worked, and so works the command itself when I run it from bash. Any idea? Some permissions has been changed at the security update? Thanks, __Yehavi:
Try turning off selinux Le 21 juin 2017 2:47 AM, "Yehavi Bourvine" <yehavi.bourvine@gmail.com> a écrit :
Hello,
Due to the recent security issues I did an update to my centos 7.3 system which runs Freeswitch 1.6.17/18 (two systems); The main packages updated were the kernel and Libc. Since then, os.execute stopped working inside lua called scripts (luarun api); they fail with error 32512 which means that the command is not available. However, before the upgrade it worked, and so works the command itself when I run it from bash.
Any idea? Some permissions has been changed at the security update?
Thanks, __Yehavi:
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
It is already disabled. I've found a new thread on RedHat's site that indeed the new patch breaks various type of process creation syscalls (like exec, system(), etc.). I tried raising the stack size as they suggest, but it does not help. Thanks, __Yehavi: 2017-06-21 14:59 GMT+03:00 Luis Daniel Lucio Quiroz < luis.daniel.lucio@gmail.com>:
Try turning off selinux
Le 21 juin 2017 2:47 AM, "Yehavi Bourvine" <yehavi.bourvine@gmail.com> a écrit :
Hello,
Due to the recent security issues I did an update to my centos 7.3 system which runs Freeswitch 1.6.17/18 (two systems); The main packages updated were the kernel and Libc. Since then, os.execute stopped working inside lua called scripts (luarun api); they fail with error 32512 which means that the command is not available. However, before the upgrade it worked, and so works the command itself when I run it from bash.
Any idea? Some permissions has been changed at the security update?
Thanks, __Yehavi:
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Hi, I managed to find a bypass in the meantime; see FS-10410. I have no idea what are the side effects of it, but at least I can work now. BTW, it looks that reports about other software packages being broken by the security patch start to publish... Regards, __Yehavi: 2017-06-21 16:37 GMT+03:00 Yehavi Bourvine <yehavi.bourvine@gmail.com>:
It is already disabled. I've found a new thread on RedHat's site that indeed the new patch breaks various type of process creation syscalls (like exec, system(), etc.). I tried raising the stack size as they suggest, but it does not help.
Thanks, __Yehavi:
2017-06-21 14:59 GMT+03:00 Luis Daniel Lucio Quiroz < luis.daniel.lucio@gmail.com>:
Try turning off selinux
Le 21 juin 2017 2:47 AM, "Yehavi Bourvine" <yehavi.bourvine@gmail.com> a écrit :
Hello,
Due to the recent security issues I did an update to my centos 7.3 system which runs Freeswitch 1.6.17/18 (two systems); The main packages updated were the kernel and Libc. Since then, os.execute stopped working inside lua called scripts (luarun api); they fail with error 32512 which means that the command is not available. However, before the upgrade it worked, and so works the command itself when I run it from bash.
Any idea? Some permissions has been changed at the security update?
Thanks, __Yehavi:
____________________________________________________________ _____________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
participants (2)
-
Luis Daniel Lucio Quiroz
-
Yehavi Bourvine