Permission denied in CIFS with kernel 4.4.0-38

Bug #1626112 reported by Nico on 2016-09-21
36
This bug affects 7 people
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
High
Seth Forshee
Xenial
High
Seth Forshee
Yakkety
High
Seth Forshee

Bug Description

SRU Justification

Imapct: A regression from upstream stable causes problems with direct mounting of DFS submounts in 4.4.0-38.57 and in yakkety 4.8 kernels, and memory leaks as well.

Fix: For xenial backport all patches which are fixes for the stable patch. Yakkety already has all the fixes except for the last one.

Regression Potential: The patches are all pretty straightforward, so regression risk is low, and they fix existing regressions.

---

Hello,

I'm experiencing problem accessing a remote CIFS mounted with kernel 4.4.0.38.

The mount succeed but I can't list the content.

ll /home/nico/mnt/carpetes
ls: cannot open directory '/home/nico/mnt/carpetes': Permission denied

The mount command is:
sudo mount -t cifs //windowsdomain.ad/carpetes/documents /home/nico/mnt/carpetes -o user=nico,password=mypassword,domain=windowsdomain.ad,sec=ntlm,file_mode=0777,dir_mode=0777

I can change directory to the mounted CIFS but can't list the content. Even with root user the error message is:

ll /home/nico/mnt/carpetes
ls: reading directory '/home/nico/mnt/carpetes': Object is remote
total 0

Thank you very much for helping.

Best regards,
Nico
---
ApportVersion: 2.20.1-0ubuntu2.1
Architecture: amd64
AudioDevicesInUse:
 USER PID ACCESS COMMAND
 /dev/snd/controlC0: nico 2741 F.... pulseaudio
CurrentDesktop: X-Cinnamon
DistroRelease: Linux 18
HibernationDevice: RESUME=UUID=62f559ea-4eb1-4b4f-be21-d6a8ae558fe0
InstallationDate: Installed on 2016-09-13 (8 days ago)
InstallationMedia: Linux Mint 18 "Sarah" - Release amd64 20160628
IwConfig:
 enp0s3 no wireless extensions.

 lo no wireless extensions.
Lsusb:
 Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
 Bus 002 Device 002: ID 80ee:0021 VirtualBox USB Tablet
 Bus 002 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
MachineType: innotek GmbH VirtualBox
Package: linux (not installed)
ProcFB: 0 vboxdrmfb
ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-4.4.0-38-generic root=UUID=d2e01c93-3645-4d39-8d01-617b7416b761 ro quiet splash
ProcVersionSignature: Ubuntu 4.4.0-38.57+lp1612135v201609211623-generic 4.4.19
RelatedPackageVersions:
 linux-restricted-modules-4.4.0-38-generic N/A
 linux-backports-modules-4.4.0-38-generic N/A
 linux-firmware 1.157.3
RfKill:

Tags: sarah
Uname: Linux 4.4.0-38-generic x86_64
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups: adm cdrom dip lpadmin plugdev sambashare sudo vboxsf
_MarkForUpload: True
dmi.bios.date: 12/01/2006
dmi.bios.vendor: innotek GmbH
dmi.bios.version: VirtualBox
dmi.board.name: VirtualBox
dmi.board.vendor: Oracle Corporation
dmi.board.version: 1.2
dmi.chassis.type: 1
dmi.chassis.vendor: Oracle Corporation
dmi.modalias: dmi:bvninnotekGmbH:bvrVirtualBox:bd12/01/2006:svninnotekGmbH:pnVirtualBox:pvr1.2:rvnOracleCorporation:rnVirtualBox:rvr1.2:cvnOracleCorporation:ct1:cvr:
dmi.product.name: VirtualBox
dmi.product.version: 1.2
dmi.sys.vendor: innotek GmbH
---
ApportVersion: 2.20.1-0ubuntu2.1
Architecture: amd64
AudioDevicesInUse:
 USER PID ACCESS COMMAND
 /dev/snd/controlC0: nico 2748 F.... pulseaudio
CurrentDesktop: X-Cinnamon
DistroRelease: Linux 18
HibernationDevice: RESUME=UUID=62f559ea-4eb1-4b4f-be21-d6a8ae558fe0
InstallationDate: Installed on 2016-09-13 (9 days ago)
InstallationMedia: Linux Mint 18 "Sarah" - Release amd64 20160628
IwConfig:
 enp0s3 no wireless extensions.

 lo no wireless extensions.
Lsusb:
 Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
 Bus 002 Device 002: ID 80ee:0021 VirtualBox USB Tablet
 Bus 002 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
MachineType: innotek GmbH VirtualBox
Package: linux (not installed)
ProcFB: 0 vboxdrmfb
ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-4.4.0-21-generic root=UUID=d2e01c93-3645-4d39-8d01-617b7416b761 ro quiet splash
ProcVersionSignature: Ubuntu 4.4.0-21.37-generic 4.4.6
RelatedPackageVersions:
 linux-restricted-modules-4.4.0-21-generic N/A
 linux-backports-modules-4.4.0-21-generic N/A
 linux-firmware 1.157.3
RfKill:

Tags: sarah
Uname: Linux 4.4.0-21-generic x86_64
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups: adm cdrom dip lpadmin plugdev sambashare sudo vboxsf
_MarkForUpload: True
dmi.bios.date: 12/01/2006
dmi.bios.vendor: innotek GmbH
dmi.bios.version: VirtualBox
dmi.board.name: VirtualBox
dmi.board.vendor: Oracle Corporation
dmi.board.version: 1.2
dmi.chassis.type: 1
dmi.chassis.vendor: Oracle Corporation
dmi.modalias: dmi:bvninnotekGmbH:bvrVirtualBox:bd12/01/2006:svninnotekGmbH:pnVirtualBox:pvr1.2:rvnOracleCorporation:rnVirtualBox:rvr1.2:cvnOracleCorporation:ct1:cvr:
dmi.product.name: VirtualBox
dmi.product.version: 1.2
dmi.sys.vendor: innotek GmbH

CVE References

This bug is missing log files that will aid in diagnosing the problem. From a terminal window please run:

apport-collect 1626112

and then change the status of the bug to 'Confirmed'.

If, due to the nature of the issue you have encountered, you are unable to run this command, please add a comment stating that fact and change the bug status to 'Confirmed'.

This change has been made by an automated script, maintained by the Ubuntu Kernel Team.

Changed in linux (Ubuntu):
status: New → Incomplete
Nico (nicom66) wrote : AlsaInfo.txt

apport information

tags: added: apport-collected sarah
description: updated
Nico (nicom66) wrote : CRDA.txt

apport information

apport information

apport information

Nico (nicom66) wrote : Lspci.txt

apport information

apport information

apport information

apport information

apport information

Nico (nicom66) wrote : PulseList.txt

apport information

Nico (nicom66) wrote : UdevDb.txt

apport information

apport information

To confirm - this problem appeared in 4.4-0.38, i.e. the mount worked fine in 4.4-0.36?

Seth Forshee (sforshee) wrote :

Based on I'm suspecting that it's this commit from upstream stable:

db9f727 fs/cifs: make share unaccessible at root level mountable

I'll make a test kernel with that reverted for testing.

Nico (nicom66) wrote : AlsaInfo.txt

apport information

description: updated
Nico (nicom66) wrote : CRDA.txt

apport information

apport information

apport information

Nico (nicom66) wrote : Lspci.txt

apport information

apport information

apport information

apport information

apport information

Nico (nicom66) wrote : PulseList.txt

apport information

Nico (nicom66) wrote : UdevDb.txt

apport information

apport information

Hello @sforshee,

Yes, the kernel 4.4.0.36 it's working fine.

I just uploaded apport-collect witj the original 4.4.0.38 kernel.

Thank you very much for you help,

Regards

Nico (nicom66) wrote :

Hello @sforshee

Bad news, with the new kernel 4.8.0.15 the problem persist. :(

Seth Forshee (sforshee) wrote :

@Nico, yeah I suspected that would be the case.

The test build is ready:

http://people.canonical.com/~sforshee/lp1626112/

summary: - Permission denied in CIFS with kernel 4.4.038
+ Permission denied in CIFS with kernel 4.4.0-38
Seth Forshee (sforshee) on 2016-09-22
Changed in linux (Ubuntu Xenial):
assignee: nobody → Seth Forshee (sforshee)
importance: Undecided → High
status: New → Incomplete
Changed in linux (Ubuntu Yakkety):
assignee: nobody → Seth Forshee (sforshee)
importance: Undecided → High
status: Incomplete → Confirmed
Nico (nicom66) wrote :

Hi @sforshee

Good news! The test build lp1626112v201609220812 is working fine!!

Congratulations!

Seth Forshee (sforshee) wrote :

Thanks for your prompt testing. I'll get the bad commit reverted.

Changed in linux (Ubuntu Xenial):
status: Incomplete → In Progress
Changed in linux (Ubuntu Yakkety):
status: Confirmed → In Progress
Seth Forshee (sforshee) wrote :

Yakkety requires reverting a few follow-up commits as well. Would you be able to test this kernel and verify that the bug is fixed? Thanks!

http://people.canonical.com/~sforshee/lp1626112/yakkety/

Changed in linux (Ubuntu Yakkety):
status: In Progress → Incomplete
Seth Forshee (sforshee) wrote :

Ignore that last request for now, there may be a fix available that won't require reverting the patch. I'm going to build new kernels.

Seth Forshee (sforshee) wrote :

Please try these builds:

http://people.canonical.com/~sforshee/lp1626112/xenial/
http://people.canonical.com/~sforshee/lp1626112/yakkety/

Sorry for asking you to test so many builds, and many thanks for being so cooperative!

Nico (nicom66) wrote :

Hello @sforshee

The both Kernel 4.4.0-38-generic #57+lp1626112v201609221047 and 4.8.0-16-generic #17~lp1626112v201609221033 works correctly.

Good job!

Thank you very much for you quick and good support.

Best regards,
Nico

Seth Forshee (sforshee) on 2016-09-23
description: updated
Changed in linux (Ubuntu Yakkety):
status: Incomplete → In Progress
Changed in linux (Ubuntu Xenial):
status: In Progress → Fix Committed
Changed in linux (Ubuntu Yakkety):
status: In Progress → Fix Committed

Just now noticed 4.4.0-40 is announced by the updater.
Since I am affected as well - does this kernel already include the change?

Thanks
Walter

Brad Figg (brad-figg) wrote :

This bug is awaiting verification that the kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-xenial' to 'verification-done-xenial'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

tags: added: verification-needed-xenial
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package linux - 4.8.0-17.19

---------------
linux (4.8.0-17.19) yakkety; urgency=low

  * build squashfs into xenial kernels by default (LP: #1593134)
    - Remove squashfs udeb

  * [Yakkety] Fix up ATA_GENERIC to match annotations file. (LP: #1627322)
    - Add d-i support for ata_generic

  * [Yakkety] Fix up CONFIG_BLK_DEV_SD to match annotations (LP: #1627330)
    - [Config] Enforce CONFIG_BLK_DEV_SD=y,CONFIG_BLK_DEV_SR=y

  * [Yakkety] Fix up ATA_PIIX to match annotations file (LP: #1627324)
    - [Config] Enforce CONFIG_ATA_PIIX=y for amd64/i386

  * Yakkety - USB drivers must be built in (LP: #1627323)
    - Update annotation enforcement for CONFIG_USB_[E|O|U|X]HCI_HCD

  * 4.8.0-16.17: genirq: Flags mismatch serial vs goldfish_pdev_bus
    (LP: #1627052)
    - [Config] CONFIG_GOLDFISH=n

  * yakkety 4.8, remove module noise kernel-4.8 (LP: #1626104)
    - Revert "UBUNTU: SAUCE: Clear Linux: bootstats: add printk's to measure boot
      time in more detail"

  * Permission denied in CIFS with kernel 4.4.0-38 (LP: #1626112)
    - SAUCE: Fix regression which breaks DFS mounting

  * Miscellaneous Ubuntu changes
    - [Config] apply xenial configuration annotations
    - s390x -- DEBUG_RODATA is now valid
    - [Config] s390x -- CONFIG_SQUASHFS=y
    - [Config] s390x -- CONFIG_ECRYPT_FS=y
    - [Config] Enable CONFIG_ACPI_PCI_SLOT=y for arm64
    - [Config] Enable CONFIG_ACPI_HED=y for arm64
    - [Config] Enable CONFIG_QUICC_ENGINE=y

  * Miscellaneous upstream changes
    - annotations: pull back to xenial

 -- Leann Ogasawara <email address hidden> Sat, 24 Sep 2016 21:31:31 -0700

Changed in linux (Ubuntu Yakkety):
status: Fix Committed → Fix Released
sergioroa (s-roa) wrote :

I installed the proposed linux-image-4.4.0-40-generic, besides linux-headers-4.4.0-40-generic and linux-image-extra-4.4.0-40-generic, the latter needed for my laptop to work properly. I can confirm that the DFS mounting problem is solved for my system.

Nico (nicom66) wrote :

Hello,

I installed the proposed linux kernel 4.4.0-40 and the CIFS permission problem is solved.

Thank you very much.

Seth Forshee (sforshee) on 2016-09-27
tags: added: verification-done-xenial
removed: verification-needed-xenial
Launchpad Janitor (janitor) wrote :
Download full text (17.5 KiB)

This bug was fixed in the package linux - 4.4.0-42.62

---------------
linux (4.4.0-42.62) xenial; urgency=low

  * Fix GRO recursion overflow for tunneling protocols (LP: #1631287)
    - tunnels: Don't apply GRO to multiple layers of encapsulation.
    - gro: Allow tunnel stacking in the case of FOU/GUE

  * CVE-2016-7039
    - SAUCE: net: add recursion limit to GRO

linux (4.4.0-41.61) xenial; urgency=low

  [ Kamal Mostafa ]

  * Release Tracking Bug
    - LP: #1628204

  * nvme drive probe failure (LP: #1626894)
    - (fix) NVMe: Don't unmap controller registers on reset

linux (4.4.0-40.60) xenial; urgency=low

  [ Kamal Mostafa ]

  * Release Tracking Bug
    - LP: #1627074

  * Permission denied in CIFS with kernel 4.4.0-38 (LP: #1626112)
    - Fix memory leaks in cifs_do_mount()
    - Compare prepaths when comparing superblocks
    - SAUCE: Fix regression which breaks DFS mounting

  * Backlight does not change when adjust it higher than 50% after S3
    (LP: #1625932)
    - SAUCE: i915_bpo: drm/i915/backlight: setup and cache pwm alternate
      increment value
    - SAUCE: i915_bpo: drm/i915/backlight: setup backlight pwm alternate
      increment on backlight enable

linux (4.4.0-39.59) xenial; urgency=low

  [ Joseph Salisbury ]

  * Release Tracking Bug
    - LP: #1625303

  * thunder: chip errata w/ multiple CQEs for a TSO packet (LP: #1624569)
    - net: thunderx: Fix for issues with multiple CQEs posted for a TSO packet

  * thunder: faulty TSO padding (LP: #1623627)
    - net: thunderx: Fix for HW issue while padding TSO packet

  * CVE-2016-6828
    - tcp: fix use after free in tcp_xmit_retransmit_queue()

  * Sennheiser Officerunner - cannot get freq at ep 0x83 (LP: #1622763)
    - SAUCE: (no-up) ALSA: usb-audio: Add quirk for sennheiser officerunner

  * Backport E3 Skylake Support in ie31200_edac to Xenial (LP: #1619766)
    - EDAC, ie31200_edac: Add Skylake support

  * Ubuntu 16.04 - Full EEH Recovery Support for NVMe devices (LP: #1602724)
    - SAUCE: nvme: Don't suspend admin queue that wasn't created

  * ISST-LTE:pNV: system ben is hung during ST (nvme) (LP: #1620317)
    - blk-mq: Allow timeouts to run while queue is freezing
    - blk-mq: improve warning for running a queue on the wrong CPU
    - blk-mq: don't overwrite rq->mq_ctx

  * lsattr 32bit does not work on 64bit kernel (Inappropriate ioctl error)
    (LP: #1619918)
    - btrfs: bugfix: handle FS_IOC32_{GETFLAGS, SETFLAGS, GETVERSION} in
      btrfs_ioctl

  * radeon: monitor connected to onboard VGA doesn't work with Xenial
    (LP: #1600092)
    - drm/radeon/dp: add back special handling for NUTMEG

  * initramfs includes qle driver, but not firmware (LP: #1623187)
    - qed: add MODULE_FIRMWARE()

  * [Hyper-V] Rebase Hyper-V to 4.7.2 (stable) (LP: #1616677)
    - hv_netvsc: Implement support for VF drivers on Hyper-V
    - hv_netvsc: Fix the list processing for network change event
    - Drivers: hv: vmbus: Introduce functions for estimating room in the ring
      buffer
    - Drivers: hv: vmbus: Use READ_ONCE() to read variables that are volatile
    - Drivers: hv: vmbus: Export the vmbus_set_event() API
    - lcoking/barriers, arch: Use smp barriers...

Changed in linux (Ubuntu Xenial):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers