https://jira.whamcloud.com This file is an XML representation of an issue en-us 9.4.14 940014 05-12-2023 https://jira.whamcloud.com/browse/LU-381 Lustre <p>Building Lustre from git/lustre-release on RHEL6, the .config file provided (lustre/kernel_patches/kernel_configs/kernel-2.6.32-2.6-rhel6-x86_64.config) does not contain a CONFIG_SECURITY_DMESG_RESTRICT directive.</p> <p>During <tt>make config</tt> a interactive prompt is provided:</p> <div class="code panel" style="border-width: 1px;"><div class="codeContent panelContent"> <pre class="code-java">$ make oldconfig || make menuconfig scripts/kconfig/conf -o arch/x86/Kconfig * * Restart config... * * * Security options * Enable access key retention support (KEYS) [Y/n/?] y Enable the /proc/keys file by which keys may be viewed (KEYS_DEBUG_PROC_KEYS) [Y/n/?] y Restrict unprivileged access to the kernel syslog (SECURITY_DMESG_RESTRICT) [N/y/?] (NEW) </pre> </div></div> <p>This may be confusing to a user unfamiliar with <a href="http://cateee.net/lkddb/web-lkddb/SECURITY_DMESG_RESTRICT.html" class="external-link" target="_blank" rel="nofollow noopener">SECURITY_DMESG_RESTRICT</a></p> <p>I suggest that this value be asserted as the default <img class="emoticon" src="https://jira.whamcloud.com/images/icons/emoticons/thumbs_down.png" height="16" width="16" align="absmiddle" alt="" border="0"/> and no prompt presented during <tt>make config</tt></p> RHEL6, git lustre-release, compiling from source LU-381

CONFIG_SECURITY_DMESG_RESTRICT missing from config for RHEL6

Improvement Minor Resolved Fixed Richard Henwood Richard Henwood Tue, 31 May 2011 08:47:27 +0000 Mon, 27 Jun 2011 19:32:44 +0000 Mon, 27 Jun 2011 19:32:44 +0000 Lustre 2.1.0 Lustre 2.0.0 0 1 <p>In fact our policy with regard to kernel configuration options is to do what upstream does. We want to change the config (when compared to upstream) as little as we need to to make Lustre work.</p> <p>So the right thing to do here is investigate what RH set this value to for RHEL6 and do the same thing.</p> <p>Thanks for the advice.</p> <p>RHEL6 set: CONFIG_SECURITY_DMESG_RESTRICT=n</p> <p>I'm preparing a patch to copy this assertion for Lustre .config.</p> <p>The patch failed in Maloo. I've rebased and resubmitted.</p> <p>Integrated in <span class="image-wrap" style=""><img src="http://newbuild.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://newbuild.whamcloud.com/job/lustre-master/./arch=x86_64,build_type=client,distro=el5,ib_stack=inkernel/172/" class="external-link" target="_blank" rel="nofollow noopener">lustre-master » x86_64,client,el5,inkernel #172</a><br/> <a href="https://jira.whamcloud.com/browse/LU-381" title="CONFIG_SECURITY_DMESG_RESTRICT missing from config for RHEL6" class="issue-link" data-issue-key="LU-381"><del>LU-381</del></a> add in RHEL6 value for CONFIG_SECURITY_DMESG_RESTRICT</p> <p>Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/master&amp;a=commit&amp;h=60e6514a8280f90a97c00e18a3774b5e0212f7ff" class="external-link" target="_blank" rel="nofollow noopener">60e6514a8280f90a97c00e18a3774b5e0212f7ff</a><br/> Files : </p> <ul> <li>lustre/kernel_patches/kernel_configs/kernel-2.6.32-2.6-rhel6-x86_64.config</li> </ul> <p>Integrated in <span class="image-wrap" style=""><img src="http://newbuild.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://newbuild.whamcloud.com/job/lustre-master/./arch=x86_64,build_type=client,distro=el6,ib_stack=inkernel/172/" class="external-link" target="_blank" rel="nofollow noopener">lustre-master » x86_64,client,el6,inkernel #172</a><br/> <a href="https://jira.whamcloud.com/browse/LU-381" title="CONFIG_SECURITY_DMESG_RESTRICT missing from config for RHEL6" class="issue-link" data-issue-key="LU-381"><del>LU-381</del></a> add in RHEL6 value for CONFIG_SECURITY_DMESG_RESTRICT</p> <p>Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/master&amp;a=commit&amp;h=60e6514a8280f90a97c00e18a3774b5e0212f7ff" class="external-link" target="_blank" rel="nofollow noopener">60e6514a8280f90a97c00e18a3774b5e0212f7ff</a><br/> Files : </p> <ul> <li>lustre/kernel_patches/kernel_configs/kernel-2.6.32-2.6-rhel6-x86_64.config</li> </ul> <p>Integrated in <span class="image-wrap" style=""><img src="http://newbuild.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://newbuild.whamcloud.com/job/lustre-master/./arch=x86_64,build_type=client,distro=sles11,ib_stack=inkernel/172/" class="external-link" target="_blank" rel="nofollow noopener">lustre-master » x86_64,client,sles11,inkernel #172</a><br/> <a href="https://jira.whamcloud.com/browse/LU-381" title="CONFIG_SECURITY_DMESG_RESTRICT missing from config for RHEL6" class="issue-link" data-issue-key="LU-381"><del>LU-381</del></a> add in RHEL6 value for CONFIG_SECURITY_DMESG_RESTRICT</p> <p>Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/master&amp;a=commit&amp;h=60e6514a8280f90a97c00e18a3774b5e0212f7ff" class="external-link" target="_blank" rel="nofollow noopener">60e6514a8280f90a97c00e18a3774b5e0212f7ff</a><br/> Files : </p> <ul> <li>lustre/kernel_patches/kernel_configs/kernel-2.6.32-2.6-rhel6-x86_64.config</li> </ul> <p>Integrated in <span class="image-wrap" style=""><img src="http://newbuild.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://newbuild.whamcloud.com/job/lustre-master/./arch=i686,build_type=client,distro=el5,ib_stack=inkernel/172/" class="external-link" target="_blank" rel="nofollow noopener">lustre-master » i686,client,el5,inkernel #172</a><br/> <a href="https://jira.whamcloud.com/browse/LU-381" title="CONFIG_SECURITY_DMESG_RESTRICT missing from config for RHEL6" class="issue-link" data-issue-key="LU-381"><del>LU-381</del></a> add in RHEL6 value for CONFIG_SECURITY_DMESG_RESTRICT</p> <p>Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/master&amp;a=commit&amp;h=60e6514a8280f90a97c00e18a3774b5e0212f7ff" class="external-link" target="_blank" rel="nofollow noopener">60e6514a8280f90a97c00e18a3774b5e0212f7ff</a><br/> Files : </p> <ul> <li>lustre/kernel_patches/kernel_configs/kernel-2.6.32-2.6-rhel6-x86_64.config</li> </ul> <p>Integrated in <span class="image-wrap" style=""><img src="http://newbuild.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://newbuild.whamcloud.com/job/lustre-master/./arch=x86_64,build_type=client,distro=ubuntu1004,ib_stack=inkernel/172/" class="external-link" target="_blank" rel="nofollow noopener">lustre-master » x86_64,client,ubuntu1004,inkernel #172</a><br/> <a href="https://jira.whamcloud.com/browse/LU-381" title="CONFIG_SECURITY_DMESG_RESTRICT missing from config for RHEL6" class="issue-link" data-issue-key="LU-381"><del>LU-381</del></a> add in RHEL6 value for CONFIG_SECURITY_DMESG_RESTRICT</p> <p>Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/master&amp;a=commit&amp;h=60e6514a8280f90a97c00e18a3774b5e0212f7ff" class="external-link" target="_blank" rel="nofollow noopener">60e6514a8280f90a97c00e18a3774b5e0212f7ff</a><br/> Files : </p> <ul> <li>lustre/kernel_patches/kernel_configs/kernel-2.6.32-2.6-rhel6-x86_64.config</li> </ul> <p>Integrated in <span class="image-wrap" style=""><img src="http://newbuild.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://newbuild.whamcloud.com/job/lustre-master/./arch=i686,build_type=server,distro=el5,ib_stack=ofa/172/" class="external-link" target="_blank" rel="nofollow noopener">lustre-master » i686,server,el5,ofa #172</a><br/> <a href="https://jira.whamcloud.com/browse/LU-381" title="CONFIG_SECURITY_DMESG_RESTRICT missing from config for RHEL6" class="issue-link" data-issue-key="LU-381"><del>LU-381</del></a> add in RHEL6 value for CONFIG_SECURITY_DMESG_RESTRICT</p> <p>Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/master&amp;a=commit&amp;h=60e6514a8280f90a97c00e18a3774b5e0212f7ff" class="external-link" target="_blank" rel="nofollow noopener">60e6514a8280f90a97c00e18a3774b5e0212f7ff</a><br/> Files : </p> <ul> <li>lustre/kernel_patches/kernel_configs/kernel-2.6.32-2.6-rhel6-x86_64.config</li> </ul> <p>Integrated in <span class="image-wrap" style=""><img src="http://newbuild.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://newbuild.whamcloud.com/job/lustre-master/./arch=i686,build_type=server,distro=el6,ib_stack=inkernel/172/" class="external-link" target="_blank" rel="nofollow noopener">lustre-master » i686,server,el6,inkernel #172</a><br/> <a href="https://jira.whamcloud.com/browse/LU-381" title="CONFIG_SECURITY_DMESG_RESTRICT missing from config for RHEL6" class="issue-link" data-issue-key="LU-381"><del>LU-381</del></a> add in RHEL6 value for CONFIG_SECURITY_DMESG_RESTRICT</p> <p>Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/master&amp;a=commit&amp;h=60e6514a8280f90a97c00e18a3774b5e0212f7ff" class="external-link" target="_blank" rel="nofollow noopener">60e6514a8280f90a97c00e18a3774b5e0212f7ff</a><br/> Files : </p> <ul> <li>lustre/kernel_patches/kernel_configs/kernel-2.6.32-2.6-rhel6-x86_64.config</li> </ul> <p>Integrated in <span class="image-wrap" style=""><img src="http://newbuild.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://newbuild.whamcloud.com/job/lustre-master/./arch=x86_64,build_type=client,distro=el5,ib_stack=ofa/172/" class="external-link" target="_blank" rel="nofollow noopener">lustre-master » x86_64,client,el5,ofa #172</a><br/> <a href="https://jira.whamcloud.com/browse/LU-381" title="CONFIG_SECURITY_DMESG_RESTRICT missing from config for RHEL6" class="issue-link" data-issue-key="LU-381"><del>LU-381</del></a> add in RHEL6 value for CONFIG_SECURITY_DMESG_RESTRICT</p> <p>Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/master&amp;a=commit&amp;h=60e6514a8280f90a97c00e18a3774b5e0212f7ff" class="external-link" target="_blank" rel="nofollow noopener">60e6514a8280f90a97c00e18a3774b5e0212f7ff</a><br/> Files : </p> <ul> <li>lustre/kernel_patches/kernel_configs/kernel-2.6.32-2.6-rhel6-x86_64.config</li> </ul> <p>Integrated in <span class="image-wrap" style=""><img src="http://newbuild.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://newbuild.whamcloud.com/job/lustre-master/./arch=x86_64,build_type=client,distro=ubuntu1004,ib_stack=ofa/172/" class="external-link" target="_blank" rel="nofollow noopener">lustre-master » x86_64,client,ubuntu1004,ofa #172</a><br/> <a href="https://jira.whamcloud.com/browse/LU-381" title="CONFIG_SECURITY_DMESG_RESTRICT missing from config for RHEL6" class="issue-link" data-issue-key="LU-381"><del>LU-381</del></a> add in RHEL6 value for CONFIG_SECURITY_DMESG_RESTRICT</p> <p>Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/master&amp;a=commit&amp;h=60e6514a8280f90a97c00e18a3774b5e0212f7ff" class="external-link" target="_blank" rel="nofollow noopener">60e6514a8280f90a97c00e18a3774b5e0212f7ff</a><br/> Files : </p> <ul> <li>lustre/kernel_patches/kernel_configs/kernel-2.6.32-2.6-rhel6-x86_64.config</li> </ul> <p>Integrated in <span class="image-wrap" style=""><img src="http://newbuild.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://newbuild.whamcloud.com/job/lustre-master/./arch=i686,build_type=server,distro=el5,ib_stack=inkernel/172/" class="external-link" target="_blank" rel="nofollow noopener">lustre-master » i686,server,el5,inkernel #172</a><br/> <a href="https://jira.whamcloud.com/browse/LU-381" title="CONFIG_SECURITY_DMESG_RESTRICT missing from config for RHEL6" class="issue-link" data-issue-key="LU-381"><del>LU-381</del></a> add in RHEL6 value for CONFIG_SECURITY_DMESG_RESTRICT</p> <p>Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/master&amp;a=commit&amp;h=60e6514a8280f90a97c00e18a3774b5e0212f7ff" class="external-link" target="_blank" rel="nofollow noopener">60e6514a8280f90a97c00e18a3774b5e0212f7ff</a><br/> Files : </p> <ul> <li>lustre/kernel_patches/kernel_configs/kernel-2.6.32-2.6-rhel6-x86_64.config</li> </ul> <p>Integrated in <span class="image-wrap" style=""><img src="http://newbuild.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://newbuild.whamcloud.com/job/lustre-master/./arch=i686,build_type=client,distro=el5,ib_stack=ofa/172/" class="external-link" target="_blank" rel="nofollow noopener">lustre-master » i686,client,el5,ofa #172</a><br/> <a href="https://jira.whamcloud.com/browse/LU-381" title="CONFIG_SECURITY_DMESG_RESTRICT missing from config for RHEL6" class="issue-link" data-issue-key="LU-381"><del>LU-381</del></a> add in RHEL6 value for CONFIG_SECURITY_DMESG_RESTRICT</p> <p>Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/master&amp;a=commit&amp;h=60e6514a8280f90a97c00e18a3774b5e0212f7ff" class="external-link" target="_blank" rel="nofollow noopener">60e6514a8280f90a97c00e18a3774b5e0212f7ff</a><br/> Files : </p> <ul> <li>lustre/kernel_patches/kernel_configs/kernel-2.6.32-2.6-rhel6-x86_64.config</li> </ul> <p>Integrated in <span class="image-wrap" style=""><img src="http://newbuild.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://newbuild.whamcloud.com/job/lustre-master/./arch=x86_64,build_type=server,distro=el5,ib_stack=inkernel/172/" class="external-link" target="_blank" rel="nofollow noopener">lustre-master » x86_64,server,el5,inkernel #172</a><br/> <a href="https://jira.whamcloud.com/browse/LU-381" title="CONFIG_SECURITY_DMESG_RESTRICT missing from config for RHEL6" class="issue-link" data-issue-key="LU-381"><del>LU-381</del></a> add in RHEL6 value for CONFIG_SECURITY_DMESG_RESTRICT</p> <p>Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/master&amp;a=commit&amp;h=60e6514a8280f90a97c00e18a3774b5e0212f7ff" class="external-link" target="_blank" rel="nofollow noopener">60e6514a8280f90a97c00e18a3774b5e0212f7ff</a><br/> Files : </p> <ul> <li>lustre/kernel_patches/kernel_configs/kernel-2.6.32-2.6-rhel6-x86_64.config</li> </ul> <p>Integrated in <span class="image-wrap" style=""><img src="http://newbuild.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://newbuild.whamcloud.com/job/lustre-master/./arch=i686,build_type=client,distro=el6,ib_stack=inkernel/172/" class="external-link" target="_blank" rel="nofollow noopener">lustre-master » i686,client,el6,inkernel #172</a><br/> <a href="https://jira.whamcloud.com/browse/LU-381" title="CONFIG_SECURITY_DMESG_RESTRICT missing from config for RHEL6" class="issue-link" data-issue-key="LU-381"><del>LU-381</del></a> add in RHEL6 value for CONFIG_SECURITY_DMESG_RESTRICT</p> <p>Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/master&amp;a=commit&amp;h=60e6514a8280f90a97c00e18a3774b5e0212f7ff" class="external-link" target="_blank" rel="nofollow noopener">60e6514a8280f90a97c00e18a3774b5e0212f7ff</a><br/> Files : </p> <ul> <li>lustre/kernel_patches/kernel_configs/kernel-2.6.32-2.6-rhel6-x86_64.config</li> </ul> <p>Integrated in <span class="image-wrap" style=""><img src="http://newbuild.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://newbuild.whamcloud.com/job/lustre-master/./arch=x86_64,build_type=server,distro=el5,ib_stack=ofa/172/" class="external-link" target="_blank" rel="nofollow noopener">lustre-master » x86_64,server,el5,ofa #172</a><br/> <a href="https://jira.whamcloud.com/browse/LU-381" title="CONFIG_SECURITY_DMESG_RESTRICT missing from config for RHEL6" class="issue-link" data-issue-key="LU-381"><del>LU-381</del></a> add in RHEL6 value for CONFIG_SECURITY_DMESG_RESTRICT</p> <p>Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/master&amp;a=commit&amp;h=60e6514a8280f90a97c00e18a3774b5e0212f7ff" class="external-link" target="_blank" rel="nofollow noopener">60e6514a8280f90a97c00e18a3774b5e0212f7ff</a><br/> Files : </p> <ul> <li>lustre/kernel_patches/kernel_configs/kernel-2.6.32-2.6-rhel6-x86_64.config</li> </ul> <p>Integrated in <span class="image-wrap" style=""><img src="http://newbuild.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://newbuild.whamcloud.com/job/lustre-master/./arch=x86_64,build_type=server,distro=el6,ib_stack=inkernel/172/" class="external-link" target="_blank" rel="nofollow noopener">lustre-master » x86_64,server,el6,inkernel #172</a><br/> <a href="https://jira.whamcloud.com/browse/LU-381" title="CONFIG_SECURITY_DMESG_RESTRICT missing from config for RHEL6" class="issue-link" data-issue-key="LU-381"><del>LU-381</del></a> add in RHEL6 value for CONFIG_SECURITY_DMESG_RESTRICT</p> <p>Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/master&amp;a=commit&amp;h=60e6514a8280f90a97c00e18a3774b5e0212f7ff" class="external-link" target="_blank" rel="nofollow noopener">60e6514a8280f90a97c00e18a3774b5e0212f7ff</a><br/> Files : </p> <ul> <li>lustre/kernel_patches/kernel_configs/kernel-2.6.32-2.6-rhel6-x86_64.config</li> </ul> <p>This fix has been merged.</p> Development Epic papercut Rank 1|hzv8y7: Rank (Obsolete) 4984