> > gzip/libgzip fails for systemd services using MemoryDenyWriteExecute=yes > Please could you expand on this? Under what circumstances are users going to be affected by this?
nearly all the systemd services include this setting, e.g.
$ grep -r MemoryDeny * dbus-org.freedesktop.hostname1.service:MemoryDenyWriteExecute=yes dbus-org.freedesktop.locale1.service:MemoryDenyWriteExecute=yes dbus-org.freedesktop.login1.service:MemoryDenyWriteExecute=yes dbus-org.freedesktop.timedate1.service:MemoryDenyWriteExecute=yes systemd-hostnamed.service:MemoryDenyWriteExecute=yes systemd-journald.service:MemoryDenyWriteExecute=yes systemd-localed.service:MemoryDenyWriteExecute=yes systemd-logind.service:MemoryDenyWriteExecute=yes systemd-networkd.service:MemoryDenyWriteExecute=yes systemd-resolved.service:MemoryDenyWriteExecute=yes systemd-timedated.service:MemoryDenyWriteExecute=yes systemd-timesyncd.service:MemoryDenyWriteExecute=yes systemd-udevd.service:MemoryDenyWriteExecute=yes udev.service:MemoryDenyWriteExecute=yes
so any call from a systemd service to gzip anything on bionic/ppc64el will fail
> > gzip/libgzip fails for systemd services using MemoryDenyWrite Execute= yes
> Please could you expand on this? Under what circumstances are users going to be affected by this?
nearly all the systemd services include this setting, e.g.
$ grep -r MemoryDeny * freedesktop. hostname1. service: MemoryDenyWrite Execute= yes freedesktop. locale1. service: MemoryDenyWrite Execute= yes freedesktop. login1. service: MemoryDenyWrite Execute= yes freedesktop. timedate1. service: MemoryDenyWrite Execute= yes hostnamed. service: MemoryDenyWrite Execute= yes journald. service: MemoryDenyWrite Execute= yes localed. service: MemoryDenyWrite Execute= yes logind. service: MemoryDenyWrite Execute= yes networkd. service: MemoryDenyWrite Execute= yes resolved. service: MemoryDenyWrite Execute= yes timedated. service: MemoryDenyWrite Execute= yes timesyncd. service: MemoryDenyWrite Execute= yes udevd.service: MemoryDenyWrite Execute= yes MemoryDenyWrite Execute= yes
dbus-org.
dbus-org.
dbus-org.
dbus-org.
systemd-
systemd-
systemd-
systemd-
systemd-
systemd-
systemd-
systemd-
systemd-
udev.service:
so any call from a systemd service to gzip anything on bionic/ppc64el will fail