From mboxrd@z Thu Jan 1 00:00:00 1970 From: =?UTF-8?Q?Cl=C3=A9ment?= Lassieur Subject: bug#31268: 'guix system vm-image' hangs Date: Fri, 18 May 2018 16:22:05 +0200 Message-ID: <87muwx9h82.fsf@lassieur.org> References: <87604en3u5.fsf@gmail.com> <20180425223706.22d91e40@centurylink.net> <877eoua9v1.fsf@gmail.com> <87r2mxw1ax.fsf@netris.org> <87bme0ydzn.fsf@gnu.org> <87y3h4fy8c.fsf@netris.org> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:46706) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1fJgHh-0006pa-5V for bug-guix@gnu.org; Fri, 18 May 2018 10:23:06 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1fJgHe-0008Ro-1A for bug-guix@gnu.org; Fri, 18 May 2018 10:23:05 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:60242) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1fJgHd-0008RO-Tf for bug-guix@gnu.org; Fri, 18 May 2018 10:23:01 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1fJgHd-0003br-JA for bug-guix@gnu.org; Fri, 18 May 2018 10:23:01 -0400 Sender: "Debbugs-submit" Resent-Message-ID: In-reply-to: <87y3h4fy8c.fsf@netris.org> List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: Mark H Weaver Cc: George myglc2 Clemmer , 31268@debbugs.gnu.org Hi, Mark H Weaver writes: > ludo@gnu.org (Ludovic Courtès) writes: > >> Mark H Weaver skribis: >> >>> FYI, I just pushed commit 8c21c64e59d3f4d223d8aeef91f06fdde7de1ab7 which >>> updates linux-libre to 4.16.6. Would you like to see if the problem >>> still persists? >> >> It does. > > I suggest doing a git bisect on the 4.16.y branch of the linux-stable > git repository, between the 4.16.3 and 4.16.4 tags. I did it, here is the result: --8<---------------cut here---------------start------------->8--- cd8d7a5778a4abf76ee8fe8f1bfcf78976029f8d is the first bad commit commit cd8d7a5778a4abf76ee8fe8f1bfcf78976029f8d Author: Theodore Ts'o Date: Wed Apr 11 13:27:52 2018 -0400 random: fix crng_ready() test commit 43838a23a05fbd13e47d750d3dfd77001536dd33 upstream. The crng_init variable has three states: 0: The CRNG is not initialized at all 1: The CRNG has a small amount of entropy, hopefully good enough for early-boot, non-cryptographical use cases 2: The CRNG is fully initialized and we are sure it is safe for cryptographic use cases. The crng_ready() function should only return true once we are in the last state. This addresses CVE-2018-1108. Reported-by: Jann Horn Fixes: e192be9d9a30 ("random: replace non-blocking pool...") Cc: stable@kernel.org # 4.8+ Signed-off-by: Theodore Ts'o Reviewed-by: Jann Horn Signed-off-by: Greg Kroah-Hartman :040000 040000 4bdc62a4604b0a754614e8601ce794f316e83622 da682af7d9d779f193becb7757a8722a71e5d85d M drivers --8<---------------cut here---------------end--------------->8--- Clément