Sudo buffer overflow explained, and how to patch (WSL and Linux) [video] • Hacker News Board

Re: Sudo buffer overflow explained, and how to patch (WSL and Linux) [video]

#41

Post by tyingq » Sat, Jan 30, 2021, 4:04 PM UTC

vmception wrote: post #39

tyingq wrote: post #36

Earlier quoted context omitted.

There's WSL1 and WSL2. Both have areas where performance isn't great, but the areas are different for each. Most of the issues are filesystem related, especially cross Win/Linux. Try a 'git clone' of a reasonably large remote repo to see what it's like. Into both the windows fs and the Linux one.

WSL2 is what I’m wondering about Should I submit hashes with geth linux on wsl2 or geth windows native I guess I could just benchmark it, havent gotten around to it.

WSL2 has reasonable performance inside the Linux filesystem, but is very slow (slower than WSL1) if you're in /mnt/c, for example. https://github.com/microsoft/WSL/issues/4197

Getting X11 up and running is a little tricky also, because localhost is not the same as localhost on the Windows box. You have to set DISPLAY to the external IP on the Windows box.

Re: Sudo buffer overflow explained, and how to patch (WSL and Linux) [video]

#42

Post by xorcist » Sat, Jan 30, 2021, 8:07 PM UTC

YurtyAherne wrote: post #37

xorcist wrote: post #29

Earlier quoted context omitted.

Normally you should use the source packages available to you. If you run configure and make on the upstream package, you will not only lose the patches CentOS normally applies to the package to integrate it better with the system, but your patch will also be untracked by the package manager. Building a source package is trivial. Just download the srpm, run rpm -i just like you normally would. This will extract the pa…

Not sure what you're on about. CentOS 6 doesn't receive updates anymore. It's EOL. Why go through all that effort if nothing will ever replace the package I compiled from source and installed?

Because there may be another security patch after this one. Because otherwise it is easy to lose track of which hosts have the patch. Because it integrates well with configuration management systems. Because you want to keep whatever other patches Red Hat has applied.

Re: Sudo buffer overflow explained, and how to patch (WSL and Linux) [video]

#43

Post by jawzz » Wed, Feb 03, 2021, 6:38 PM UTC

batch12 wrote: post #30

vmception wrote: post #26

Been waiting for a WSL thread. Does WSL have a performance hit on Windows 10? I sometimes can't decide if I want to use a familiar linux version of a program or a Windows version, but I like how WSL lets you access the windows file system

Not only that, but it lets you launch windows executables too.

Hey, I just want to apologize for my reply here [1]. Looking back I realize it was rude and simply incorrect, and I regret sending it.

Sorry to intrude on this unrelated thread but it's the only way to get in touch with you.

[1] https://news.ycombinator.com/item?id=25828810