[-- Attachment #1.1: Type: text/plain, Size: 1 bytes --] [-- Attachment #1.2: signature.asc --] [-- Type: application/pgp-signature, Size: 255 bytes --] [-- Attachment #2: 0001-news-Add-zh_CN-translation.patch --] [-- Type: text/x-patch, Size: 2091 bytes --] From f595386121bac3109ce788e6fe4ecd856dab8c32 Mon Sep 17 00:00:00 2001 From: Zhu Zihao <all_but_last@163.com> Date: Sun, 14 Feb 2021 21:40:02 +0800 Subject: [PATCH] news: Add 'zh_CN' translation. --- etc/news.scm | 17 +++++++++++++++-- 1 file changed, 15 insertions(+), 2 deletions(-) diff --git a/etc/news.scm b/etc/news.scm index a1a0b7b2a9..cc3b04a3b8 100644 --- a/etc/news.scm +++ b/etc/news.scm @@ -21,7 +21,8 @@ (entry (commit "aa8de806252e3835d57fab351b02d13db762deac") (title (en "Risk of local privilege escalation @i{via} setuid programs") - (de "Risiko lokaler Rechteausweitung bei setuid-Programmen")) + (de "Risiko lokaler Rechteausweitung bei setuid-Programmen") + (zh_CN "存在通过 setuid 程序进行本地提权的风险")) (body (en "On Guix System, setuid programs were, until now, installed as setuid-root @emph{and} setgid-root (in the @file{/run/setuid-programs} @@ -53,7 +54,19 @@ guix system reconfigure /run/current-system/configuration.scm @end example Benutzer von Guix auf einer „Fremddistribution“ sind @emph{nicht} betroffen. -Siehe @url{https://issues.guix.gnu.org/46395} für weitere Informationen."))) +Siehe @url{https://issues.guix.gnu.org/46395} für weitere Informationen.") + (zh_CN "到目前为止,Guix 系统上的setuid 程序(位于 @file{/run/setuid-programs}) +同时具有 setuid-root @emph{和} setgid-root 权限。然而,绝大部分此类程序被设计为在拥有 +setuid 权限而非 setgid 权限时运行。因此,这样的设置可能会使系统受到本地提权攻击。 + +此漏洞已经被修复,同时建议用户使用下列命令升级他们的系统: + +@example +guix system reconfigure /run/current-system/configuration.scm +@end example + +在 ``第三方宿主系统'' 上使用 Guix 的用户不受此漏洞影响,详情请参阅 +@url{https://issues.guix.gnu.org/46395}。"))) (entry (commit "aedbc5ff32a62f45aeed74c6833399a6cf2c22dc") (title -- 2.30.0 [-- Attachment #3: Type: text/plain, Size: 101 bytes --] -- Retrieve my PGP public key: gpg --recv-keys D47A9C8B2AE3905B563D9135BE42B352A9F6821F Zihao
[-- Attachment #1.1: Type: text/plain, Size: 24 bytes --] Fix some minor issues. [-- Attachment #1.2: signature.asc --] [-- Type: application/pgp-signature, Size: 255 bytes --] [-- Attachment #2: 0001-news-Add-zh_CN-translation.patch --] [-- Type: text/x-patch, Size: 2086 bytes --] From 1a22ec435681a95faee596287781db2b8e06f2a1 Mon Sep 17 00:00:00 2001 From: Zhu Zihao <all_but_last@163.com> Date: Sun, 14 Feb 2021 21:40:02 +0800 Subject: [PATCH] news: Add 'zh_CN' translation. --- etc/news.scm | 17 +++++++++++++++-- 1 file changed, 15 insertions(+), 2 deletions(-) diff --git a/etc/news.scm b/etc/news.scm index a1a0b7b2a9..247198b587 100644 --- a/etc/news.scm +++ b/etc/news.scm @@ -21,7 +21,8 @@ (entry (commit "aa8de806252e3835d57fab351b02d13db762deac") (title (en "Risk of local privilege escalation @i{via} setuid programs") - (de "Risiko lokaler Rechteausweitung bei setuid-Programmen")) + (de "Risiko lokaler Rechteausweitung bei setuid-Programmen") + (zh_CN "存在通过 setuid 程序进行本地提权的风险")) (body (en "On Guix System, setuid programs were, until now, installed as setuid-root @emph{and} setgid-root (in the @file{/run/setuid-programs} @@ -53,7 +54,19 @@ guix system reconfigure /run/current-system/configuration.scm @end example Benutzer von Guix auf einer „Fremddistribution“ sind @emph{nicht} betroffen. -Siehe @url{https://issues.guix.gnu.org/46395} für weitere Informationen."))) +Siehe @url{https://issues.guix.gnu.org/46395} für weitere Informationen.") + (zh_CN "到目前为止,Guix 系统上的 setuid 程序(位于 @file{/run/setuid-programs}) +同时具有 setuid-root @emph{和} setgid-root 权限。然而,此类程序大多被设计为在拥有 +setuid 权限而非 setgid 权限时运行。因此,这样的设置可能会使系统受到本地提权攻击。 + +此漏洞已经被修复,同时建议用户使用下列命令升级他们的系统: + +@example +guix system reconfigure /run/current-system/configuration.scm +@end example + +在 ``第三方宿主系统'' 上使用 Guix 的用户不受此漏洞影响,详情请参阅 +@url{https://issues.guix.gnu.org/46395}。"))) (entry (commit "aedbc5ff32a62f45aeed74c6833399a6cf2c22dc") (title -- 2.30.0 [-- Attachment #3: Type: text/plain, Size: 101 bytes --] -- Retrieve my PGP public key: gpg --recv-keys D47A9C8B2AE3905B563D9135BE42B352A9F6821F Zihao
[-- Attachment #1: Type: text/plain, Size: 206 bytes --] > 到目前为止,Guix 系统上的setuid 程序 miss a space ? > 绝大部分此类程序被设计 此类程序大多被设计 I think this is better. looks good to me. [-- Attachment #2: Type: text/html, Size: 383 bytes --]
[-- Attachment #1.1: Type: text/plain, Size: 22 bytes --] Rename zh_CN to zh. [-- Attachment #1.2: signature.asc --] [-- Type: application/pgp-signature, Size: 255 bytes --] [-- Attachment #2: 0001-news-Add-zh-translation.patch --] [-- Type: text/x-patch, Size: 2077 bytes --] From 6be5e45820d07b16dd3d8c7fe2b9961a74ac0057 Mon Sep 17 00:00:00 2001 From: Zhu Zihao <all_but_last@163.com> Date: Sun, 14 Feb 2021 21:40:02 +0800 Subject: [PATCH] news: Add 'zh' translation. --- etc/news.scm | 17 +++++++++++++++-- 1 file changed, 15 insertions(+), 2 deletions(-) diff --git a/etc/news.scm b/etc/news.scm index a1a0b7b2a9..b0760f6717 100644 --- a/etc/news.scm +++ b/etc/news.scm @@ -21,7 +21,8 @@ (entry (commit "aa8de806252e3835d57fab351b02d13db762deac") (title (en "Risk of local privilege escalation @i{via} setuid programs") - (de "Risiko lokaler Rechteausweitung bei setuid-Programmen")) + (de "Risiko lokaler Rechteausweitung bei setuid-Programmen") + (zh "存在通过 setuid 程序进行本地提权的风险")) (body (en "On Guix System, setuid programs were, until now, installed as setuid-root @emph{and} setgid-root (in the @file{/run/setuid-programs} @@ -53,7 +54,19 @@ guix system reconfigure /run/current-system/configuration.scm @end example Benutzer von Guix auf einer „Fremddistribution“ sind @emph{nicht} betroffen. -Siehe @url{https://issues.guix.gnu.org/46395} für weitere Informationen."))) +Siehe @url{https://issues.guix.gnu.org/46395} für weitere Informationen.") + (zh "到目前为止,Guix 系统上的 setuid 程序(位于 @file{/run/setuid-programs}) +同时具有 setuid-root @emph{和} setgid-root 权限。然而,此类程序大多被设计为在拥有 +setuid 权限而非 setgid 权限时运行。因此,这样的设置可能会使系统受到本地提权攻击。 + +此漏洞已经被修复,同时建议用户使用下列命令升级他们的系统: + +@example +guix system reconfigure /run/current-system/configuration.scm +@end example + +在 ``第三方宿主系统'' 上使用 Guix 的用户不受此漏洞影响,详情请参阅 +@url{https://issues.guix.gnu.org/46395}。"))) (entry (commit "aedbc5ff32a62f45aeed74c6833399a6cf2c22dc") (title -- 2.30.1 [-- Attachment #3: Type: text/plain, Size: 100 bytes --] -- Retrieve my PGP public key: gpg --recv-keys D47A9C8B2AE3905B563D9135BE42B352A9F6821F Zihao
Hi,
Zhu Zihao <all_but_last@163.com> skribis:
> From 6be5e45820d07b16dd3d8c7fe2b9961a74ac0057 Mon Sep 17 00:00:00 2001
> From: Zhu Zihao <all_but_last@163.com>
> Date: Sun, 14 Feb 2021 21:40:02 +0800
> Subject: [PATCH] news: Add 'zh' translation.
>
> ---
> etc/news.scm | 17 +++++++++++++++--
> 1 file changed, 15 insertions(+), 2 deletions(-)
Applied, thanks!
Ludo’.
On Sun, Feb 14, 2021 at 10:30:13PM +0800, Zhu Zihao wrote:
> Subject: [PATCH] news: Add 'zh' translation.
>
> ---
> etc/news.scm | 17 +++++++++++++++--
> 1 file changed, 15 insertions(+), 2 deletions(-)
This patch was missing a copyright header line.
May I add the following?
;; Copyright © 2021 Zhu Zihao <all_but_last@163.com>
Regards,
Florian
[-- Attachment #1: Type: text/plain, Size: 566 bytes --] pelzflorian (Florian Pelz) writes: > On Sun, Feb 14, 2021 at 10:30:13PM +0800, Zhu Zihao wrote: >> Subject: [PATCH] news: Add 'zh' translation. >> >> --- >> etc/news.scm | 17 +++++++++++++++-- >> 1 file changed, 15 insertions(+), 2 deletions(-) > > This patch was missing a copyright header line. > > May I add the following? > > ;; Copyright © 2021 Zhu Zihao <all_but_last@163.com> > > Regards, > Florian Please do, thanks you! ;) -- Retrieve my PGP public key: gpg --recv-keys D47A9C8B2AE3905B563D9135BE42B352A9F6821F Zihao [-- Attachment #2: signature.asc --] [-- Type: application/pgp-signature, Size: 255 bytes --]
On Thu, Mar 11, 2021 at 11:58:27PM +0800, Zhu Zihao wrote:
> pelzflorian (Florian Pelz) writes:
> > May I add the following?
> >
> > ;; Copyright © 2021 Zhu Zihao <all_but_last@163.com>
> Please do, thanks you! ;)
Done as 526b5b106e66a82cdc53f3a06d4bd6521eeb0daf.
Regards,
Florian