[BETA] prepatch a system-wide patching system (alternative to patchmanager) - Page 2 - maemo.org

Active Topics

Sailfish OS for the Motorola Moto G7 Power (XT1955-5) - (ocean) (4)
to SailfishOS by Maemish - 11 hrs, 3 mins ago
The N900 is now 15 years old! (6)
to Nokia N900 by Macros - 2 days, 7 hrs ago
F(x)tec Pro1x (QWERTY) for sale (0)
to Buy & Sell by aln00000 - 2 days, 19 hrs ago
n770 youtube video (0)
to General by nmdv - 6 days, 19 hrs ago
more...

Page 2 of 6

< Prev

Next >

Last »

Thread Tools

jakibaki	2018-03-12 , 20:14
Posts: 120 \| Thanked: 843 times \| Joined on Jul 2015 @ Berlin, Germany	#11

Originally Posted by cy8aer

I tried the packaged version and rebooted. But I had some difficulties:

1st try: Unlocking froze the device
2nd try: After shutdown and start I was able to unlock but then lipstick was veeery slow (waiting circle on startup). I had a frozen screen when swiping but it came back.

Then I uninstalled both packages (prepatcher and the keyboard patch) and rebooted and every went smooth again.

JollaC 2.1.4.14

Hmm

I only tried it on my xperia x which is a good deal more powerful then your device.

Could you please try again and this time just let the phone sit for a few minutes after rebooting? I also have the circle-issue but after it goes away (20 seconds for me) everything goes smoothly.

I know this is not a permanent solution but I want to narrow down the issue.

I also released a new version which should fix a few memory-leaks but unfortunately doesn't completely fix the loading-bug so that may help.

Last edited by jakibaki; 2018-03-12 at 21:10.

Quote & Reply |

The Following 4 Users Say Thank You to jakibaki For This Useful Post:
Ahti30708, Amboss, Fellfrosch, juiceme

	Amboss	2018-03-12 , 21:11
	Posts: 237 \| Thanked: 502 times \| Joined on May 2010 @ Mittelfranken, Germany	#12

Originally Posted by tortoisedoc

Hello? Security? Am I the only one worried here?

I think I know where you're heading.

Patchmanager modifies files which I can check afterwards to be in place and doing what its was meant for. Checking can happen even in an environment like recovery shell.

Prepatch is injected in file system calls. You say yourself "be sure turn of this patch or that" to actually copy the correct file. So if you want to be sure, a patch does not contain malicious parts, you have to check that either before installing or has to happen in recovery shell were the prepatch is not loaded. Otherwise you can't be sure while prepatch is active. Because if someone wants to add malicious code, he just needs to also cover any file requests regarding his files with something innocent using the same architecture.

Quote & Reply |

The Following 10 Users Say Thank You to Amboss For This Useful Post:
eekkelund, Fellfrosch, jakibaki, juiceme, lal, MartinK, olf, peterleinchen, taixzo, Zeta

jakibaki	2018-03-12 , 21:52
Posts: 120 \| Thanked: 843 times \| Joined on Jul 2015 @ Berlin, Germany	#13

Originally Posted by Amboss

I think I know where you're heading.

Patchmanager modifies files which I can check afterwards to be in place and doing what its was meant for. Checking can happen even in an environment like recovery shell.

Prepatch is injected in file system calls. You say yourself "be sure turn of this patch or that" to actually copy the correct file. So if you want to be sure, a patch does not contain malicious parts, you have to check that either before installing or has to happen in recovery shell were the prepatch is not loaded. Otherwise you can't be sure while prepatch is active. Because if someone wants to add malicious code, he just needs to also cover any file requests regarding his files with something innocent using the same architecture.

I see your point and it's a very valid concern but isn't that the case with essentially everything you install from an untrused source?

Any rpm you install could also setup a rootkit on your device while it's installing which makes sure that you can't notice it unless you're in recovery even without prepatch.

I don't see any way to prevent rpms from doing evil things (as they're being installed with a tool that I don't have any control over) but that's the same way with the original patchmanager.

If I ever add something like the pm2-webstore I'll make sure that users have to explicitly enable the patches after installing them so that they can check out the content but for now I don't see the point in creating something that would be trivial to bypass in the rpm postininstall script.

Last edited by jakibaki; 2018-03-12 at 23:26.

Quote & Reply |

The Following 11 Users Say Thank You to jakibaki For This Useful Post:
Amboss, eekkelund, Fellfrosch, imaginaryenemy, juiceme, lal, MartinK, meloferz, olf, peterleinchen, Zeta

	Ancelad	2018-03-13 , 09:08
	Posts: 1,552 \| Thanked: 3,108 times \| Joined on Jun 2012 @ Russia, 96	#14

Well, it works on my Inoi R7, the first lipstick start after installation was about 30-35 seconds, but it works as fast as usual.

__________________
Twitter: @iAncelad
Try my SailfishOS theme for Nokia N9
Mmm, beeeeeer

Quote & Reply |

The Following 5 Users Say Thank You to Ancelad For This Useful Post:
imaginaryenemy, jakibaki, juiceme, lal, olf

jakibaki	2018-03-13 , 10:18
Posts: 120 \| Thanked: 843 times \| Joined on Jul 2015 @ Berlin, Germany	#15

I fixed the loading-screen-bug! Prepatch should now be usable on older devices too!

Quote & Reply |

The Following 5 Users Say Thank You to jakibaki For This Useful Post:
Jordi, juiceme, lal, meloferz, olf

clovis86	2018-03-13 , 10:42
Posts: 575 \| Thanked: 621 times \| Joined on May 2010	#16

I'm facin issue after installing prepatch, can't launch anymore the dialer.
App is loading and then is closing itself.
Tryed restarting lipstick and rebooting Xperia without any impact.
Removing prepatch and restarting give me the dialer back.

Maybe some parts from "old" patchmanager are still there and causing this issue ?
Do you want me to fill a bug on github ?

Quote & Reply |

The Following 4 Users Say Thank You to clovis86 For This Useful Post:
Amboss, imaginaryenemy, jakibaki, juiceme

jakibaki	2018-03-13 , 11:08
Posts: 120 \| Thanked: 843 times \| Joined on Jul 2015 @ Berlin, Germany	#17

Originally Posted by clovis86

I'm facin issue after installing prepatch, can't launch anymore the dialer.
App is loading and then is closing itself.
Tryed restarting lipstick and rebooting Xperia without any impact.
Removing prepatch and restarting give me the dialer back.

Maybe some parts from "old" patchmanager are still there and causing this issue ?
Do you want me to fill a bug on github ?

That's very weird. The dialer works perfectly for me.

Please make sure that you're running the newest version (I released an update a few minutes ago).

If the issue persists could you please open an issue on github with the output of running

Code:

voicecall-ui

from ssh. (I don't want to clutter this thread with the back and forth of trying to debug this)

Quote & Reply |

The Following 3 Users Say Thank You to jakibaki For This Useful Post:
Amboss, clovis86, juiceme

clovis86	2018-03-13 , 11:21
Posts: 575 \| Thanked: 621 times \| Joined on May 2010	#18

Just reinstalled your new 0.2 version and issue is fixed, yay !

Quote & Reply |

The Following 5 Users Say Thank You to clovis86 For This Useful Post:
Amboss, imaginaryenemy, jakibaki, juiceme, olf

cy8aer	2018-03-13 , 14:10
Posts: 281 \| Thanked: 679 times \| Joined on Feb 2010	#19

Originally Posted by jakibaki

Hmm I only tried it on my xperia x which is a good deal more powerful then your device.

So what? I do not buy any electronic crap every year. And it does not matter how fast it is...

Quote & Reply |

The Following User Says Thank You to cy8aer For This Useful Post:
juiceme

cy8aer	2018-03-13 , 14:15
Posts: 281 \| Thanked: 679 times \| Joined on Feb 2010	#20

Ok, the new version of prepatcher seems to work. Thank you.

Just a lesson: Never test on the fastest machine you can buy. Test it on the slowest oldest. If there will be some hardware bug some time and your processors get 30% slower all of your hardware - old and new - will still perform.