Fatdog901 pflask bug

[fatdoguser]

Fatdog 901 has the same /usr/bin/pflask version as 813, but they are different file sizes and the (smaller) Fatdog 901 version doesn't work correctly

In Fatdog 901

Code: Select all

pflask --caps=-sys_chroot

and within that

Code: Select all

chroot / 

... and you're still permitted to chroot

In Fatdog 813 you correctly get a Operation Not Permitted

Dropping a copy of Fatdog 813 /usr/bin/pflask binary into Fatdog 901 fixes the issue but that obviously isn't ideal.

[jamesbond]

@fatdoguser thank you for reporting.
Pflask in 814 was built and linked with libcap-ng, in 901 it wasn't.
I've rebuilt it. Pflask now uses and depends on libcap-ng (as it should be).
You can uninstall the built-in pflask and re-install from the gslapt repo.

[fatdoguser]

Thanks @jamesbond

But you missed a bit

Rather than 'Reinstall' in gslapt I used the Remove option and that ran fine. Then opting for Install and that presents a error "Failed to download pflask: MD5 checksum mismatch, override with --no-md5"

[jamesbond]

Ah you're too fast for me

Perhaps you tried to access the repo when the index was still rebuilding after the upload.
Please re-update gslapt, and the install again.
I just tested, it installs fine here.

If gslapt refuses to update then clear slapt-get cache by deleting all files in /var/slapt-get (including the hidden files); then run update again.

Don't forget to make sure you have libcap-ng installed.

[fatdoguser]

@jamesbond

Installed pflask from gslapt, tested drop chroot capabilities and works

Thanks.