Lucky
October 27, 2024, 7:30pm
1
安装wine的话会引入fftw+32,然而这个包安装的库实际上为64bit:
# file /opt/32/lib/libfftw3.so.3.4.4
/opt/32/lib/libfftw3.so.3.4.4: ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=94e56497cf3a9c33f67a8460f93b5c587af978f0, stripped
这是什么原因?
dmesg中有日志显示:
landlock: Disabled but requested by user space. You should enable Landlock at boot time: https://docs.kernel.org/userspace-api/landlock.html#boot-time-configuration
我记得xz事件里面Jia Tan的一个commit就是禁用landlock(git.tukaani.org - xz.git/blobdiff - CMakeLists.txt ),AOSC不会被Jia Tan渗透了吧。
1 Like
xry111
January 13, 2025, 5:02pm
2
猜测问题2是内核配置里面 Ordered list of enabled LSMs (CONFIG_LSM) 没有包含landlock所致 (来自某个被人指控为Jia Tan同伙的其他发行版维护者)
感谢提醒,已在 linux-kernel-6.13.0
(1:6.13.0-0.7a) 及 linux-kernel-6.12.9
(1:6.12.9-3) 中调整 CONFIG_LSM 为启用 AppArmor 后的默认值 "landlock,lockdown,yama,loadpin,safesetid,apparmor,selinux,smack,tomoyo,ipe,bpf"
Lucky
January 13, 2025, 5:36pm
4
我建议也修改一下xz的编译参数:
PKGNAME=xz
PKGDES="General-purpose data compression software with a high compression ratio"
PKGDEP="glibc"
BUILDDEP="po4a"
PKGSEC=utils
# Note: --enable-assume-ram=SIZE
#
# "If and only if the real amount of RAM cannot be determined, assume SIZE MiB.
# The default is 128 MiB. This affects the default memory usage limit."
#
# We won't specify any non-default value for this option.
#
# Note: --enable-unaligned-access=auto
#
# "Enable if the system supports *fast* unaligned memory access with 16-bit,
# 32-bit, and 64-bit integers. By default, this is enabled only on x86,
# x86_64, big endian PowerPC, and some ARM systems."
#
# FIXME: --enable-external-sha256 is not supported on Linux/Glibc.
此文件已被截断。 显示原始文件
把这一行:
去掉。
还有上面的FIXME也去掉,因为xz现在支持landlock作为sandbox。