`find: ‘/usr/lib/modules/6.1.0-25-amd64/kernel/drivers/xen’: Bad message` / `unable to truncate for updated status of 'security-misc': Read-only file system`

Support
1

Will investigate.

2

Did you use the testers repository?

security-misc might need improvement:

find: ‘/usr/lib/modules/6.1.0-25-amd64/kernel/drivers/xen’: Bad message

There is on issue which might cause strange file permission issues (maybe in testers repository): file/folder permissions issue `d????????? ? ? ? ? ? .` | Firefox no longer starting (probably not not a Firefox issue) | caused by disallow registering interpreters for miscellaneous binary formats `sysctl fs.binfmt_misc.status=0` · Issue #267 · Kicksecure/security-misc · GitHub

Is fs.binfmt_misc.status enabled or disabled? Should be disabled (unfortunately). To check:

sudo sysctl -a | grep fs.binfmt_misc.status

Should show:

fs.binfmt_misc.status = enabled

Otherwise after next upgrade and reboot will be reset to disabled.

For debugging, could you please run this command after reproducing this issue?

sudo ls -la /usr/lib/modules/6.1.0-25-amd64/kernel/drivers/xen

But security-misc isn’t breaking DPKG / APT, because it does exit 0 (success) by design:

Could even be (virtual) hard drive issues which can cause all sorts of strange issues. But this issue isn’t caused by security-misc or I don’t see how it could accomplish such an error. Also hard to image this being caused by PipeWire / PulseAudio.

At this point, the system is in a pretty broken state. Does that fix itself after reboot?

3

I cannot reproduce this issue inside Qubes anon-whonix.

[workstation user ~]% sudo apt remove "--purge" pipewire pipewire-pulse pipewire-alsa*
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
Note, selecting 'pipewire-alsa' for glob 'pipewire-alsa*'
Package 'pipewire-alsa' is not installed, so not removed
The following packages were automatically installed and are no longer required:
  liblua5.3-0 libpipewire-0.3-0 libpipewire-0.3-modules libspa-0.2-modules libwireplumber-0.4-0 pipewire-bin python3-numpy python3-qubesimgconverter qubes-gpg-split qubes-img-converter
  qubes-pdf-converter qubes-thunderbird thunderbird-qubes
Use 'sudo apt autoremove' to remove them.
The following additional packages will be installed:
  libasound2-plugins libfftw3-single3 libpulsedsp pulseaudio pulseaudio-utils
Suggested packages:
  libfftw3-bin libfftw3-dev pavumeter pavucontrol paprefs avahi-daemon
The following packages will be REMOVED:
  pipewire* pipewire-pulse* pipewire-qubes* qubes-whonix-workstation* qubes-whonix-workstation-packages-recommended* wireplumber*
The following NEW packages will be installed:
  libasound2-plugins libfftw3-single3 libpulsedsp pulseaudio pulseaudio-utils
0 upgraded, 5 newly installed, 6 to remove and 0 not upgraded.
Need to get 2,180 kB of archives.
After this operation, 8,904 kB of additional disk space will be used.
Do you want to continue? [Y/n] 
Get:1 tor+https://deb.debian.org/debian bookworm/main amd64 libfftw3-single3 amd64 3.3.10-1 [806 kB]
Get:2 tor+https://deb.debian.org/debian bookworm/main amd64 libasound2-plugins amd64 1.2.7.1-1 [75.2 kB]                                                                                     
Get:3 tor+https://deb.debian.org/debian bookworm/main amd64 libpulsedsp amd64 16.1+dfsg1-2+b1 [36.8 kB]                                                                                      
Get:4 tor+https://deb.debian.org/debian bookworm/main amd64 pulseaudio-utils amd64 16.1+dfsg1-2+b1 [88.8 kB]                                                                                 
Get:5 tor+https://deb.debian.org/debian bookworm/main amd64 pulseaudio amd64 16.1+dfsg1-2+b1 [1,174 kB]                                                                                      
Fetched 2,180 kB in 23s (95.2 kB/s)                                                                                                                                                          
(Reading database ... 74111 files and directories currently installed.)
Removing qubes-whonix-workstation (3:24.6-1) ...
Removing qubes-whonix-workstation-packages-recommended (1:20.6-1) ...
Removing wireplumber (0.4.13-1) ...
Removing pipewire-pulse (0.3.65-3+deb12u1) ...
Removing pipewire:amd64 (0.3.65-3+deb12u1) ...
Removing pipewire-qubes (4.2.18-1+deb12u1) ...
Selecting previously unselected package libfftw3-single3:amd64.
(Reading database ... 73972 files and directories currently installed.)
Preparing to unpack .../libfftw3-single3_3.3.10-1_amd64.deb ...
Unpacking libfftw3-single3:amd64 (3.3.10-1) ...
Selecting previously unselected package libasound2-plugins:amd64.
Preparing to unpack .../libasound2-plugins_1.2.7.1-1_amd64.deb ...
Unpacking libasound2-plugins:amd64 (1.2.7.1-1) ...
Selecting previously unselected package libpulsedsp:amd64.
Preparing to unpack .../libpulsedsp_16.1+dfsg1-2+b1_amd64.deb ...
Unpacking libpulsedsp:amd64 (16.1+dfsg1-2+b1) ...
Selecting previously unselected package pulseaudio-utils.
Preparing to unpack .../pulseaudio-utils_16.1+dfsg1-2+b1_amd64.deb ...
Unpacking pulseaudio-utils (16.1+dfsg1-2+b1) ...
Selecting previously unselected package pulseaudio.
Preparing to unpack .../pulseaudio_16.1+dfsg1-2+b1_amd64.deb ...
Unpacking pulseaudio (16.1+dfsg1-2+b1) ...
Setting up libasound2-plugins:amd64 (1.2.7.1-1) ...
Setting up libfftw3-single3:amd64 (3.3.10-1) ...
Setting up libpulsedsp:amd64 (16.1+dfsg1-2+b1) ...
Setting up pulseaudio-utils (16.1+dfsg1-2+b1) ...
Setting up pulseaudio (16.1+dfsg1-2+b1) ...
Created symlink /etc/systemd/user/default.target.wants/pulseaudio.service → /usr/lib/systemd/user/pulseaudio.service.
Created symlink /etc/systemd/user/sockets.target.wants/pulseaudio.socket → /usr/lib/systemd/user/pulseaudio.socket.
Processing triggers for security-misc (3:39.5-1) ...
INFO: triggered security-misc: 'security-misc' security-misc DPKG_MAINTSCRIPT_NAME: 'postinst' $\@: 'triggered /usr' 2: '/usr'
/usr/libexec/security-misc/mmap-rnd-bits: INFO: No Linux config file detected in folder /boot/ (starting with 'config-'). Therefore using built-in defaults.
/usr/libexec/security-misc/mmap-rnd-bits: INFO: Successfully written ASLR map config file:
/etc/sysctl.d/30_security-misc_aslr-mmap.conf
Running SUID Disabler and Permission Hardener... See also:
https://www.kicksecure.com/wiki/SUID_Disabler_and_Permission_Hardener
/var/lib/dpkg/info/security-misc.postinst: INFO: running: permission-hardener enable
permission-hardener: [NOTICE]: Run: setcap -r -- /bin/ping
permission-hardener: [NOTICE]: To compare the current and previous permission modes, install 'meld' (or preferred diff tool) for comparison of file mode changes:
    sudo apt install --no-install-recommends meld
    meld /var/lib/permission-hardener/existing_mode/statoverride /var/lib/permission-hardener/new_mode/statoverride
/var/lib/dpkg/info/security-misc.postinst: INFO: Permission hardening success.
Processing triggers for libc-bin (2.36-9+deb12u8) ...
Processing triggers for man-db (2.11.2-2) ...
Processing triggers for dbus (1.14.10-1~deb12u1) ...
(Reading database ... 74338 files and directories currently installed.)
Purging configuration files for pipewire-qubes (4.2.18-1+deb12u1) ...
dpkg: warning: while removing pipewire-qubes, directory '/lib/systemd/user-preset' not empty so not removed
Purging configuration files for wireplumber (0.4.13-1) ...
Purging configuration files for pipewire-pulse (0.3.65-3+deb12u1) ...
Purging configuration files for pipewire:amd64 (0.3.65-3+deb12u1) ...
Processing triggers for qubes-core-agent (4.2.37-1+deb12u1) ...
[workstation user ~]%

Can you reproduce this issue inside anon-whonix?

Is this issue reproducible always lets say in a new VirtualBox VM?

1 Like
4

True, i cant reproduce it as well from my end.

I think we can safely ignore this ticket.

1 Like