Hi, On Tue, 25 May 2021 16:02:14 +0200 Finn Martin Krein <finnkr...@physik.fu-berlin.de> wrote: > when using cifs-utils to mount a samba share using a krb5 ticket cifs.upcall > fails: > $ mount -t cifs --verbose -o > seal,idsfromsid,cifsacl,rw,sec=krb5i,user=finnkrein,cruid=finnkrein > //storage.physik.fu-berlin.de/finnkrein /net/test > mount error(126): Required key not available > > From journalctl -e: > cifs.upcall[34940]: switch_to_process_ns: setns() failed for cgroup > cifs.upcall[34940]: unable to switch to process namespace: Operation not> > cifs.upcall[34940]: Exit status 1 > > This bug was likely introduced by the fix for CVE-2021-20208 (#987308), is > known upstream and discussed at > https://www.spinics.net/lists/linux-cifs/msg21550.html. > The respective patch is currently included as "0010-CVE-2021-20208.patch".
As https://www.spinics.net/lists/linux-cifs/msg21976.html, SUSE engineer has already prepared and applied fix for it but not merged into upstream yet. So, let's try to build and test it. I'll prepare the packages for it. -- Regards, Hideki Yamane henrich @ debian.org/iijmio-mail.jp
