Re: F24 GStreamer zero day

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 30 November 2016 at 23:19, Ahmad Samir <ahmadsamir3891@xxxxxxxxx> wrote:
> On 29 November 2016 at 16:24, Richard W.M. Jones <rjones@xxxxxxxxxx> wrote:
>> On Wed, Nov 23, 2016 at 09:39:03AM +0100, Florian Weimer wrote:
>>> On 11/23/2016 02:15 AM, Sérgio Basto wrote:
>>> >On Ter, 2016-11-22 at 18:57 -0600, Michael Catanzaro wrote:
>>> >>Hi,
>>> >>
>>> >>Is anybody working on fixing [1]?
>>> >>
>>> >>The exploit is a little impractical in that it only works if you have
>>> >>not updated any F24 base packages except GStreamer, but we should
>>> >>still
>>> >>fix it. I don't see any GStreamer updates in bodhi yet.
>>> >
>>> >for gstreamer
>>> >https://bugzilla.redhat.com/show_bug.cgi?id=1395128
>>> >https://bugzilla.redhat.com/show_bug.cgi?id=1395768
>>> >https://bugzilla.redhat.com/show_bug.cgi?id=1397064
>>> >
>>> >for gstreamer1
>>> >https://bugzilla.redhat.com/show_bug.cgi?id=1397065
>>> >https://bugzilla.redhat.com/show_bug.cgi?id=1395769
>>> >
>>> >but no commits in scm yet
>>>
>>> What about the larger picture?  Can tracker be made optional again
>>> for the GNOME desktop?
>>
>> I have this in my .bashrc:
>>
>> # Kill with fire.
>> killall -9 -r tracker-.* >& /dev/null
>>
>> Seems to be the only way to permanently disable it that I have found
>> (I'm not using GNOME).
>>
>> Rich.
>
> On F25 (not sure about older releases), on can mask the tracker
> systemd user service(s):
> # cd /etc/systemd/user/
> # for i in $(rpm -ql tracker | grep systemd.*.service); do ln -s
> /dev/null $(basename $i); done
>
> the tracker processes won't get started the next time you log in.
>

This doesn't work if one uses startx to log in instead of logging in
via a graphical display manager; in that case this seems to work:
$ mkdir -p ~/.local/share/dbus-1/services
$ cd ~/.local/share/dbus-1/services
$ cp /usr/share/dbus-1/services/*Tracker* .
$ perl -p -i -e 's!Exec=.*!Exec=/bin/false!' *Tracker*

-- 
Ahmad Samir
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx




[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]
  Powered by Linux