unable to make backup link of `./usr/sbin/uuidd' before installing new version: Operation not permitted
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
linux (Ubuntu) |
Fix Released
|
High
|
Seth Forshee | ||
Trusty |
Fix Released
|
High
|
Seth Forshee | ||
Vivid |
Fix Released
|
High
|
Seth Forshee | ||
Wily |
Fix Released
|
High
|
Seth Forshee | ||
Xenial |
Fix Released
|
High
|
Seth Forshee |
Bug Description
== SRU Justification ==
Impact: Root in a user namespace cannot create new hardlinks to suid files owned by another user even when the inode owner is mapped into that user namespace. This is causing some package upgrades to fail in unprivileged containers.
Fix: Patch from linux-next to allow a user with CAP_FOWNER in a user namespace to link to a suid inode if the inode owner is mapped into the user namespace.
Regression Potential: The main risks here would be security related since the fix is a loosening of the protected_hardlinks sysctl which serves as a mitigation against some classes of security vulnerabilities. However a user which would now be allowed to link directly would generally be able to create links to the same file via other mechanisms already, so it's unlikely that this creates any additional attack surface in practice.
---
Upon trying to do an apt-get upgrade I run into this error:
sudo apt-get dist-upgrade
Reading package lists... Done
Building dependency tree
Reading state information... Done
Calculating upgrade... Done
The following packages will be upgraded:
uuid-runtime
1 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
2 not fully installed or removed.
Need to get 0 B/12.3 kB of archives.
After this operation, 0 B of additional disk space will be used.
Do you want to continue? [Y/n]
(Reading database ... 27622 files and directories currently installed.)
Preparing to unpack .../uuid-
Unpacking uuid-runtime (2.20.1-
dpkg: error processing archive /var/cache/
unable to make backup link of `./usr/sbin/uuidd' before installing new version: Operation not permitted
Processing triggers for man-db (2.6.7.1-1ubuntu1) ...
Errors were encountered while processing:
/var/cache/
E: Sub-process /usr/bin/dpkg returned an error code (1)
ProblemType: Bug
DistroRelease: Ubuntu 14.04
Package: util-linux 2.20.1-
ProcVersionSign
Uname: Linux 3.19.0-26-generic x86_64
ApportVersion: 2.14.1-0ubuntu3.13
Architecture: amd64
Date: Mon Sep 21 19:43:02 2015
ProcEnviron:
TERM=screen-
PATH=(custom, no user)
LANG=en_US.UTF-8
SHELL=/bin/bash
SourcePackage: util-linux
UpgradeStatus: No upgrade log present (probably fresh install)
Changed in linux (Ubuntu): | |
assignee: | nobody → Seth Forshee (sforshee) |
importance: | Undecided → High |
status: | Incomplete → Confirmed |
no longer affects: | util-linux (Ubuntu) |
Changed in linux (Ubuntu Trusty): | |
assignee: | nobody → Seth Forshee (sforshee) |
importance: | Undecided → High |
status: | New → In Progress |
Changed in linux (Ubuntu Vivid): | |
assignee: | nobody → Seth Forshee (sforshee) |
importance: | Undecided → High |
status: | New → In Progress |
Changed in linux (Ubuntu Wily): | |
assignee: | nobody → Seth Forshee (sforshee) |
importance: | Undecided → High |
status: | New → In Progress |
Changed in linux (Ubuntu Xenial): | |
status: | Confirmed → In Progress |
description: | updated |
Changed in linux (Ubuntu Trusty): | |
status: | In Progress → Fix Committed |
Changed in linux (Ubuntu Wily): | |
status: | In Progress → Fix Committed |
Changed in linux (Ubuntu Vivid): | |
status: | In Progress → Fix Committed |
tags: |
added: verification-done-trusty removed: verification-needed-trusty |
tags: |
added: verification-done-vivid verification-done-wily removed: verification-needed-vivid verification-needed-wily |
That is a very strange error. What if you try this:
sudo -s
cd /usr/sbin
ln uuidd uuidd.bak
rm uuidd.bak