bitbake错误

在OE bitbake配置完毕的情况下,执行bitbake 命令时出现:

 

$ bitbake midinux-image
/home/fedora11/stuff/bitbake/lib/bb/COW.py:29: DeprecationWarning: the sets module is deprecated
  import types, sets
ERROR:  Openembedded's config sanity checker detected a potential misconfiguration.
    Either fix the cause of this error or at your own risk disable the checker (see sanity.conf).
    Following is the list of potential problems / advisories:

    /proc/sys/vm/mmap_min_addr is not 0. This will cause problems with qemu so please fix the value (as root).


解决办法:
[root@redora11 stuff]# vim /etc/sysctl.conf


增加一句:vm.mmap_min_addr = 0


[root@redora11 stuff]# sysctl -p
net.ipv4.ip_forward = 0
net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.default.accept_source_route = 0
kernel.sysrq = 0
kernel.core_uses_pid = 1
vm.mmap_min_addr = 0

 

重新执行bitbake就可以通过。

 

------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

 

据说和一个安全漏洞有关系,在Linux kernel2.6.*中,空指针的参数设置,可以让本地用户实现root的特权,有人发现了这个问题,后来官方在2.6.32RC中修复了该问题,但是之前内核版本都存在,用户们为了阻止被攻击,就设置Value>0。

 

参考文档:

 

A null-pointer dereference in the Linux kernel allows local users to assume root privileges. Brad Spengler, who claims first discovery, announced that he will present a corresponding exploit during the course of the day.

Concurrent with Spengler's discovery in mid-October, Earl Chew likewise brought attention to the bug in an lkml.org blog . The bug affects all kernel versions in the 2.6 series and was fixed in the upcoming 2.6.32 RC. So far Red Hat is the only distro providing patches for what is now the CVE-2009-3547 advisory. Users of other distros can apply a workaround that sets the pointer to a value higher than zero, which prevents the exploit. Admins can enter

# cat /proc/sys/vm/mmap_min_addr

to read the current pointer value. If larger than zero, no action need be taken, otherwise use the command

# sysctl -w vm.mmap_min_addr="4096"

to set the value to 4096, for example. The value, however, is only good until the next reboot. To give it a more lasting value, users of Debian or its derivatives should use the following commands:

# echo "vm.mmap_min_addr = 4096" > /etc/sysctl.d/mmap_min_addr.conf
# /etc/init.d/procps restart

Users of openSUSE should use the following command instead:

# echo -e "/nvm.mmap_min_addr=4096/n" >> /etc/sysctl.conf

followed by a system reboot.

First indications are that Ubuntu/Kubuntu 9.10 are not affected by the bug, because the initial counter is set to 65535. However, subsequently installed programs such as Wine or Qemu will reset the counter to zero. First tests with Wine installations show this to be evident. The openSUSE distro is potentially the most vulnerable in that the initial counter is also set to zero.

(Thomas Leichtenstern)
  • 0
    点赞
  • 1
    收藏
    觉得还不错? 一键收藏
  • 0
    评论

“相关推荐”对你有帮助么?

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值