RDEV-1036
added: rublon.config path to python script, and config file new makefile new path and names in buildRublonPam.sh
This commit is contained in:
parent
fbc0ace678
commit
915428dcf1
BIN
SSH/.vscode/ipch/390ca3d2576525b3/QRCODEGEN.ipch
vendored
Normal file
BIN
SSH/.vscode/ipch/390ca3d2576525b3/QRCODEGEN.ipch
vendored
Normal file
Binary file not shown.
BIN
SSH/.vscode/ipch/390ca3d2576525b3/mmap_address.bin
vendored
Normal file
BIN
SSH/.vscode/ipch/390ca3d2576525b3/mmap_address.bin
vendored
Normal file
Binary file not shown.
BIN
SSH/.vscode/ipch/43186d2ecf0abc76/mmap_address.bin
vendored
Normal file
BIN
SSH/.vscode/ipch/43186d2ecf0abc76/mmap_address.bin
vendored
Normal file
Binary file not shown.
BIN
SSH/.vscode/ipch/4ffc64a309b12bb8/CJSON.ipch
vendored
Normal file
BIN
SSH/.vscode/ipch/4ffc64a309b12bb8/CJSON.ipch
vendored
Normal file
Binary file not shown.
BIN
SSH/.vscode/ipch/4ffc64a309b12bb8/mmap_address.bin
vendored
Normal file
BIN
SSH/.vscode/ipch/4ffc64a309b12bb8/mmap_address.bin
vendored
Normal file
Binary file not shown.
BIN
SSH/.vscode/ipch/7512c20022b388e9/mmap_address.bin
vendored
Normal file
BIN
SSH/.vscode/ipch/7512c20022b388e9/mmap_address.bin
vendored
Normal file
Binary file not shown.
BIN
SSH/.vscode/ipch/94a49a9e0628e1a1/CFG_PARSE.ipch
vendored
Normal file
BIN
SSH/.vscode/ipch/94a49a9e0628e1a1/CFG_PARSE.ipch
vendored
Normal file
Binary file not shown.
BIN
SSH/.vscode/ipch/94a49a9e0628e1a1/mmap_address.bin
vendored
Normal file
BIN
SSH/.vscode/ipch/94a49a9e0628e1a1/mmap_address.bin
vendored
Normal file
Binary file not shown.
BIN
SSH/.vscode/ipch/abd48fb87277d4cd/mmap_address.bin
vendored
Normal file
BIN
SSH/.vscode/ipch/abd48fb87277d4cd/mmap_address.bin
vendored
Normal file
Binary file not shown.
BIN
SSH/.vscode/ipch/b0827e1639cc663/mmap_address.bin
vendored
Normal file
BIN
SSH/.vscode/ipch/b0827e1639cc663/mmap_address.bin
vendored
Normal file
Binary file not shown.
BIN
SSH/.vscode/ipch/bc9541924e868ed5/mmap_address.bin
vendored
Normal file
BIN
SSH/.vscode/ipch/bc9541924e868ed5/mmap_address.bin
vendored
Normal file
Binary file not shown.
BIN
SSH/.vscode/ipch/bc9546924e869754/mmap_address.bin
vendored
Normal file
BIN
SSH/.vscode/ipch/bc9546924e869754/mmap_address.bin
vendored
Normal file
Binary file not shown.
120
SSH/PAM/Makefile
120
SSH/PAM/Makefile
@ -1,114 +1,14 @@
|
||||
SHELL = /bin/sh
|
||||
CENTOS:=$(wildcard /etc/centos-release*)
|
||||
REDHATOS:=$(wildcard /etc/redhat_version*)
|
||||
OS:=$(shell lsb_release -si)
|
||||
make:
|
||||
ifneq ($(CENTOS),)
|
||||
sudo yum install -y curl-devel
|
||||
sudo yum install -y openssl-devel
|
||||
sudo yum install -y pam-devel
|
||||
sudo yum install -y epel-release
|
||||
sudo yum install -y python3-devel.x86_64
|
||||
sudo yum install -y python36
|
||||
sudo pip3 install "python-socketio[client]"
|
||||
sudo yum install -y policycoreutils-devel
|
||||
endif
|
||||
ifneq ($(REDHATOS),)
|
||||
sudo yum install -y curl-devel
|
||||
sudo yum install -y openssl-devel
|
||||
sudo yum install -y pam-devel
|
||||
sudo yum install -y epel-release
|
||||
sudo yum install -y python3-devel.x86_64
|
||||
sudo yum install -y python36
|
||||
sudo pip3 install "python-socketio[client]"
|
||||
sudo yum install -y policycoreutils-devel
|
||||
endif
|
||||
ifeq ($(OS),Ubuntu)
|
||||
sudo apt-get update
|
||||
sudo apt-get install -y gcc
|
||||
sudo apt-get install -y openssh-server
|
||||
sudo apt-get install -y libcurl4-openssl-dev
|
||||
sudo apt-get install -y libpam0g-dev
|
||||
sudo DEBIAN_FRONTEND=noninteractive apt-get install -y libssl-dev
|
||||
sudo apt-get install -y python2.7-dev
|
||||
sudo apt-get install -y python
|
||||
sudo apt-get install -y python-pip
|
||||
sudo pip install "python-socketio[client]"
|
||||
endif
|
||||
ifeq ($(OS),Debian)
|
||||
sudo apt-get install -y openssh-server
|
||||
sudo apt-get install -y libcurl4-openssl-dev
|
||||
sudo apt-get install -y libpam0g-dev
|
||||
sudo DEBIAN_FRONTEND=noninteractive apt-get install -y libssl-dev
|
||||
sudo apt-get install -y python2.7-dev
|
||||
sudo apt-get install -y python
|
||||
sudo apt-get install -y python-pip
|
||||
sudo pip install "python-socketio[client]"
|
||||
endif
|
||||
gcc -fPIC -fno-stack-protector -std=c99 -c rublonPam.c src/pamApp.c src/coreHandler.c src/signatureWrapper.c lib/cfg_parse.c lib/cJSON.c lib/qrcodegen.c
|
||||
selinux:
|
||||
sudo checkmodule -M -m -o login_rublon.mod login_rublon.te
|
||||
sudo semodule_package -o login_rublon.pp -m login_rublon.mod
|
||||
sudo semodule -i login_rublon.pp
|
||||
clean:
|
||||
ifneq ($(CENTOS),)
|
||||
sudo rm /lib64/security/rublonPam.so
|
||||
sudo rm /lib64/security/confirmMethod.py
|
||||
sudo rm /lib64/security/confirmUser.py
|
||||
sudo rm /lib64/security/.config
|
||||
endif
|
||||
ifneq ($(REDHATOS),)
|
||||
sudo rm /lib64/security/rublonPam.so
|
||||
sudo rm /lib64/security/confirmMethod.py
|
||||
sudo rm /lib64/security/confirmUser.py
|
||||
sudo rm /lib64/security/.config
|
||||
endif
|
||||
ifeq ($(OS),Ubuntu)
|
||||
sudo rm /lib/security/rublonPam.so
|
||||
sudo rm /lib/security/confirmMethod.py
|
||||
sudo rm /lib/security/confirmUser.py
|
||||
sudo rm /lib/security/.config
|
||||
endif
|
||||
ifeq ($(OS),Debian)
|
||||
sudo rm /lib/security/rublonPam.so
|
||||
sudo rm /lib/security/confirmMethod.py
|
||||
sudo rm /lib/security/confirmUser.py
|
||||
sudo rm /lib/security/.config
|
||||
endif
|
||||
checkmodule -M -m -o login_rublon.mod login_rublon.te
|
||||
semodule_package -o login_rublon.pp -m login_rublon.mod
|
||||
semodule -i login_rublon.pp
|
||||
install:
|
||||
ifneq ($(CENTOS),)
|
||||
sudo cp confirmMethod.py /lib64/security
|
||||
sudo cp confirmUser.py /lib64/security
|
||||
sudo chmod +x /lib64/security/confirmMethod.py
|
||||
sudo chmod +x /lib64/security/confirmUser.py
|
||||
sudo cp .config /lib64/security
|
||||
sudo ld -x --shared -o /lib64/security/rublonPam.so -lcurl rublonPam.o pamApp.o coreHandler.o signatureWrapper.o cfg_parse.o cJSON.o qrcodegen.o
|
||||
endif
|
||||
ifneq ($(REDHATOS),)
|
||||
sudo cp confirmMethod.py /lib64/security
|
||||
sudo cp confirmUser.py /lib64/security
|
||||
sudo chmod +x /lib64/security/confirmMethod.py
|
||||
sudo chmod +x /lib64/security/confirmUser.py
|
||||
sudo cp .config /lib64/security
|
||||
sudo ld -x --shared -o /lib64/security/rublonPam.so -lcurl rublonPam.o pamApp.o coreHandler.o signatureWrapper.o cfg_parse.o cJSON.o qrcodegen.o
|
||||
endif
|
||||
ifeq ($(OS),Ubuntu)
|
||||
sudo mkdir -p /lib/security
|
||||
sudo cp confirmMethod.py /lib/security
|
||||
sudo cp confirmUser.py /lib/security
|
||||
sudo chmod +x /lib/security/confirmMethod.py
|
||||
sudo chmod +x /lib/security/confirmUser.py
|
||||
sudo cp .config /lib/security
|
||||
sudo ld -x --shared -o /lib/security/rublonPam.so -lcurl rublonPam.o pamApp.o coreHandler.o signatureWrapper.o cfg_parse.o cJSON.o qrcodegen.o
|
||||
endif
|
||||
ifeq ($(OS),Debian)
|
||||
sudo mkdir -p /lib/security
|
||||
sudo cp confirmMethod.py /lib/security
|
||||
sudo cp confirmUser.py /lib/security
|
||||
sudo chmod +x /lib/security/confirmMethod.py
|
||||
sudo chmod +x /lib/security/confirmUser.py
|
||||
sudo cp .config /lib/security
|
||||
sudo ld -x --shared -o /lib/security/rublonPam.so -lcurl rublonPam.o pamApp.o coreHandler.o signatureWrapper.o cfg_parse.o cJSON.o qrcodegen.o
|
||||
endif
|
||||
sudo rm rublonPam.o pamApp.o coreHandler.o signatureWrapper.o cfg_parse.o cJSON.o qrcodegen.o
|
||||
sudo service sshd restart
|
||||
cp confirmMethod.py /usr/share/rublon-ssh
|
||||
cp confirmUser.py /usr/share/rublon-ssh/
|
||||
chmod +x /usr/share/rublon-ssh//confirmMethod.py
|
||||
chmod +x /usr/share/rublon-ssh//confirmUser.py
|
||||
cp rublon.config /etc
|
||||
ld -x --shared -o /lib64/security/pam_rublon.so -lcurl rublonPam.o pamApp.o coreHandler.o signatureWrapper.o cfg_parse.o cJSON.o qrcodegen.o
|
||||
service sshd restart
|
||||
|
||||
@ -3,11 +3,12 @@
|
||||
gcc -fPIC -fno-stack-protector -std=c99 -c rublonPam.c src/pamApp.c src/coreHandler.c src/signatureWrapper.c lib/cfg_parse.c lib/cJSON.c lib/qrcodegen.c
|
||||
|
||||
sudo mkdir -p /lib64/security
|
||||
sudo mkdir -p /usr/share/rublon-ssh
|
||||
|
||||
sudo cp .config /lib64/security
|
||||
sudo cp confirmUser.py /lib64/security
|
||||
sudo cp confirmMethod.py /lib64/security
|
||||
sudo cp rublon.config /etc
|
||||
sudo cp confirmUser.py /usr/share/rublon-ssh
|
||||
sudo cp confirmMethod.py /usr/share/rublon-ssh
|
||||
|
||||
sudo ld -x --shared -o /lib64/security/rublonPam.so -lcurl rublonPam.o pamApp.o coreHandler.o signatureWrapper.o cfg_parse.o cJSON.o qrcodegen.o
|
||||
sudo ld -x --shared -o /lib64/security/pam_rublon.so -lcurl rublonPam.o pamApp.o coreHandler.o signatureWrapper.o cfg_parse.o cJSON.o qrcodegen.o
|
||||
|
||||
rm rublonPam.o pamApp.o coreHandler.o signatureWrapper.o cfg_parse.o cJSON.o qrcodegen.o
|
||||
BIN
SSH/PAM/login_rublon.mod
Normal file
BIN
SSH/PAM/login_rublon.mod
Normal file
Binary file not shown.
BIN
SSH/PAM/login_rublon.pp
Normal file
BIN
SSH/PAM/login_rublon.pp
Normal file
Binary file not shown.
4
SSH/PAM/rublon.config
Normal file
4
SSH/PAM/rublon.config
Normal file
@ -0,0 +1,4 @@
|
||||
systemToken=
|
||||
secretKey=
|
||||
userDomain=
|
||||
rublonApiServer=https://core.rublon.net
|
||||
BIN
SSH/PAM/rublonPam.so
Normal file
BIN
SSH/PAM/rublonPam.so
Normal file
Binary file not shown.
55
SSH/PAM/rublonPam.spec
Normal file
55
SSH/PAM/rublonPam.spec
Normal file
@ -0,0 +1,55 @@
|
||||
Summary: hello greets the world
|
||||
Name: rublonPam
|
||||
Version: 1.0
|
||||
Release: 1
|
||||
License: GPL
|
||||
Group: Applications/Tutorials
|
||||
Source: rublonPam.tar.gz
|
||||
URL: https://www.rublon.net
|
||||
Distribution: CENTOS Linux
|
||||
Vendor: -
|
||||
Packager: Thorsten Staerk
|
||||
|
||||
%description
|
||||
hello greets the world
|
||||
|
||||
%prep
|
||||
yum install -y curl-devel
|
||||
yum install -y openssl-devel
|
||||
yum install -y pam-devel
|
||||
yum install -y policycoreutils-python
|
||||
sed -i 's/UsePAM .*/UsePAM yes/' /etc/ssh/sshd_config
|
||||
sed -i 's/ChallengeResponseAuthentication .*/ChallengeResponseAuthentication yes/' /etc/ssh/sshd_config
|
||||
touch /home/vagrant/login_rublon.te
|
||||
cat > /home/vagrant/login_rublon.te << EOF
|
||||
module login_rublon 1.0;
|
||||
require {
|
||||
type http_port_t;
|
||||
type http_cache_port_t;
|
||||
type sshd_t;
|
||||
class tcp_socket name_connect;
|
||||
};
|
||||
allow sshd_t {http_port_t http_cache_port_t}:tcp_socket name_connect;
|
||||
EOF
|
||||
checkmodule -M -m -o /home/vagrant/login_rublon.mod /home/vagrant/login_rublon.te
|
||||
semodule_package -o /home/vagrant/login_rublon.pp -m /home/vagrant/login_rublon.mod
|
||||
semodule -i /home/vagrant/login_rublon.pp
|
||||
grep -q -e '#auth substack password-auth' /etc/pam.d/sshd || sed -i -e 's/auth substack password-auth/#auth substack password-auth/g' /etc/pam.d/sshd
|
||||
grep -q -e 'auth requisite pam_unix.so' /etc/pam.d/sshd || sed -i '\$aauth requisite pam_unix.so' /etc/pam.d/sshd
|
||||
grep -q -e 'auth required rublonPam.so' /etc/pam.d/sshd || sed -i '\$aauth required rublonPam.so' /etc/pam.d/sshd
|
||||
grep -q -e 'account required rublonPam.so' /etc/pam.d/sshd || sed -i '\$aaccount required rublonPam.so' /etc/pam.d/sshd
|
||||
rm /home/vagrant/login_rublon.te
|
||||
rm /home/vagrant/login_rublon.mod
|
||||
rm /home/vagrant/login_rublon.pp
|
||||
service sshd restart
|
||||
|
||||
%setup
|
||||
|
||||
%build
|
||||
make
|
||||
|
||||
%install
|
||||
make install
|
||||
|
||||
%files
|
||||
%defattr(-, root, root)
|
||||
@ -28,7 +28,7 @@ pthread_mutex_t mutex = PTHREAD_MUTEX_INITIALIZER;
|
||||
void* usersThread(void* input) {
|
||||
int out = -1;
|
||||
char *script;
|
||||
asprintf(&script,"python3 /lib64/security/confirmUser.py %s %s",((struct args*)input)->rublonApiServer ,((struct args*)input)->transactionId);
|
||||
asprintf(&script,"python3 /usr/share/rublon-ssh/confirmUser.py %s %s",((struct args*)input)->rublonApiServer ,((struct args*)input)->transactionId);
|
||||
out = system(script);
|
||||
if(out != -1) {
|
||||
if(out == 256)
|
||||
@ -47,7 +47,7 @@ void* methodsThread(void* input) {
|
||||
|
||||
int out = -1;
|
||||
char *script;
|
||||
asprintf(&script,"python3 /lib64/security/confirmMethod.py %s %s",((struct args*)input)->rublonApiServer ,((struct args*)input)->transactionId);
|
||||
asprintf(&script,"python3 /usr/share/rublon-ssh/confirmMethod.py %s %s",((struct args*)input)->rublonApiServer ,((struct args*)input)->transactionId);
|
||||
out = system(script);
|
||||
if(out != -1) {
|
||||
if(out == 256)
|
||||
@ -62,7 +62,7 @@ void* methodsThread(void* input) {
|
||||
char *getConfigValue(const char * value) {
|
||||
struct cfg_struct* cfg;
|
||||
cfg = cfg_init();
|
||||
if (cfg_load(cfg,"/lib64/security/.config") < 0)
|
||||
if (cfg_load(cfg,"/etc/rublon.config") < 0)
|
||||
return NULL;
|
||||
else
|
||||
return (char*)cfg_get(cfg,value);
|
||||
|
||||
682
SSH/PAM/ubuntu-bionic-18.04-cloudimg-console.log
Normal file
682
SSH/PAM/ubuntu-bionic-18.04-cloudimg-console.log
Normal file
@ -0,0 +1,682 @@
|
||||
[ 0.000000] Linux version 4.15.0-47-generic (buildd@lgw01-amd64-001) (gcc version 7.3.0 (Ubuntu 7.3.0-16ubuntu3)) #50-Ubuntu SMP Wed Mar 13 10:44:52 UTC 2019 (Ubuntu 4.15.0-47.50-generic 4.15.18)
|
||||
[ 0.000000] Command line: BOOT_IMAGE=/boot/vmlinuz-4.15.0-47-generic root=LABEL=cloudimg-rootfs ro console=tty1 console=ttyS0
|
||||
[ 0.000000] KERNEL supported cpus:
|
||||
[ 0.000000] Intel GenuineIntel
|
||||
[ 0.000000] AMD AuthenticAMD
|
||||
[ 0.000000] Centaur CentaurHauls
|
||||
[ 0.000000] x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers'
|
||||
[ 0.000000] x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers'
|
||||
[ 0.000000] x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers'
|
||||
[ 0.000000] x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256
|
||||
[ 0.000000] x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format.
|
||||
[ 0.000000] e820: BIOS-provided physical RAM map:
|
||||
[ 0.000000] BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable
|
||||
[ 0.000000] BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved
|
||||
[ 0.000000] BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved
|
||||
[ 0.000000] BIOS-e820: [mem 0x0000000000100000-0x000000003ffeffff] usable
|
||||
[ 0.000000] BIOS-e820: [mem 0x000000003fff0000-0x000000003fffffff] ACPI data
|
||||
[ 0.000000] BIOS-e820: [mem 0x00000000fec00000-0x00000000fec00fff] reserved
|
||||
[ 0.000000] BIOS-e820: [mem 0x00000000fee00000-0x00000000fee00fff] reserved
|
||||
[ 0.000000] BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved
|
||||
[ 0.000000] NX (Execute Disable) protection: active
|
||||
[ 0.000000] SMBIOS 2.5 present.
|
||||
[ 0.000000] DMI: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
|
||||
[ 0.000000] Hypervisor detected: KVM
|
||||
[ 0.000000] e820: last_pfn = 0x3fff0 max_arch_pfn = 0x400000000
|
||||
[ 0.000000] MTRR: Disabled
|
||||
[ 0.000000] x86/PAT: MTRRs disabled, skipping PAT initialization too.
|
||||
[ 0.000000] CPU MTRRs all blank - virtualized system.
|
||||
[ 0.000000] x86/PAT: Configuration [0-7]: WB WT UC- UC WB WT UC- UC
|
||||
[ 0.000000] found SMP MP-table at [mem 0x0009fff0-0x0009ffff] mapped at [ (ptrval)]
|
||||
[ 0.000000] Scanning 1 areas for low memory corruption
|
||||
[ 0.000000] RAMDISK: [mem 0x35add000-0x36d65fff]
|
||||
[ 0.000000] ACPI: Early table checksum verification disabled
|
||||
[ 0.000000] ACPI: RSDP 0x00000000000E0000 000024 (v02 VBOX )
|
||||
[ 0.000000] ACPI: XSDT 0x000000003FFF0030 00003C (v01 VBOX VBOXXSDT 00000001 ASL 00000061)
|
||||
[ 0.000000] ACPI: FACP 0x000000003FFF00F0 0000F4 (v04 VBOX VBOXFACP 00000001 ASL 00000061)
|
||||
[ 0.000000] ACPI: DSDT 0x000000003FFF0470 0022EA (v02 VBOX VBOXBIOS 00000002 INTL 20100528)
|
||||
[ 0.000000] ACPI: FACS 0x000000003FFF0200 000040
|
||||
[ 0.000000] ACPI: FACS 0x000000003FFF0200 000040
|
||||
[ 0.000000] ACPI: APIC 0x000000003FFF0240 00005C (v02 VBOX VBOXAPIC 00000001 ASL 00000061)
|
||||
[ 0.000000] ACPI: SSDT 0x000000003FFF02A0 0001CC (v01 VBOX VBOXCPUT 00000002 INTL 20100528)
|
||||
[ 0.000000] No NUMA configuration found
|
||||
[ 0.000000] Faking a node at [mem 0x0000000000000000-0x000000003ffeffff]
|
||||
[ 0.000000] NODE_DATA(0) allocated [mem 0x3ffc5000-0x3ffeffff]
|
||||
[ 0.000000] kvm-clock: cpu 0, msr 0:3ff44001, primary cpu clock
|
||||
[ 0.000000] kvm-clock: Using msrs 4b564d01 and 4b564d00
|
||||
[ 0.000000] kvm-clock: using sched offset of 4254011593 cycles
|
||||
[ 0.000000] clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns
|
||||
[ 0.000000] Zone ranges:
|
||||
[ 0.000000] DMA [mem 0x0000000000001000-0x0000000000ffffff]
|
||||
[ 0.000000] DMA32 [mem 0x0000000001000000-0x000000003ffeffff]
|
||||
[ 0.000000] Normal empty
|
||||
[ 0.000000] Device empty
|
||||
[ 0.000000] Movable zone start for each node
|
||||
[ 0.000000] Early memory node ranges
|
||||
[ 0.000000] node 0: [mem 0x0000000000001000-0x000000000009efff]
|
||||
[ 0.000000] node 0: [mem 0x0000000000100000-0x000000003ffeffff]
|
||||
[ 0.000000] Reserved but unavailable: 114 pages
|
||||
[ 0.000000] Initmem setup node 0 [mem 0x0000000000001000-0x000000003ffeffff]
|
||||
[ 0.000000] ACPI: PM-Timer IO Port: 0x4008
|
||||
[ 0.000000] IOAPIC[0]: apic_id 2, version 32, address 0xfec00000, GSI 0-23
|
||||
[ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl)
|
||||
[ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 low level)
|
||||
[ 0.000000] Using ACPI (MADT) for SMP configuration information
|
||||
[ 0.000000] smpboot: Allowing 2 CPUs, 0 hotplug CPUs
|
||||
[ 0.000000] PM: Registered nosave memory: [mem 0x00000000-0x00000fff]
|
||||
[ 0.000000] PM: Registered nosave memory: [mem 0x0009f000-0x0009ffff]
|
||||
[ 0.000000] PM: Registered nosave memory: [mem 0x000a0000-0x000effff]
|
||||
[ 0.000000] PM: Registered nosave memory: [mem 0x000f0000-0x000fffff]
|
||||
[ 0.000000] e820: [mem 0x40000000-0xfebfffff] available for PCI devices
|
||||
[ 0.000000] Booting paravirtualized kernel on KVM
|
||||
[ 0.000000] clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645519600211568 ns
|
||||
[ 0.000000] random: get_random_bytes called from start_kernel+0x99/0x4fd with crng_init=0
|
||||
[ 0.000000] setup_percpu: NR_CPUS:8192 nr_cpumask_bits:2 nr_cpu_ids:2 nr_node_ids:1
|
||||
[ 0.000000] percpu: Embedded 46 pages/cpu @ (ptrval) s151552 r8192 d28672 u1048576
|
||||
[ 0.000000] PV qspinlock hash table entries: 256 (order: 0, 4096 bytes)
|
||||
[ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 257913
|
||||
[ 0.000000] Policy zone: DMA32
|
||||
[ 0.000000] Kernel command line: BOOT_IMAGE=/boot/vmlinuz-4.15.0-47-generic root=LABEL=cloudimg-rootfs ro console=tty1 console=ttyS0
|
||||
[ 0.000000] Memory: 983604K/1048120K available (12300K kernel code, 2473K rwdata, 4252K rodata, 2408K init, 2416K bss, 64516K reserved, 0K cma-reserved)
|
||||
[ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
|
||||
[ 0.000000] Kernel/User page tables isolation: enabled
|
||||
[ 0.000000] ftrace: allocating 39206 entries in 154 pages
|
||||
[ 0.004000] Hierarchical RCU implementation.
|
||||
[ 0.004000] RCU restricting CPUs from NR_CPUS=8192 to nr_cpu_ids=2.
|
||||
[ 0.004000] Tasks RCU enabled.
|
||||
[ 0.004000] RCU: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2
|
||||
[ 0.004000] NR_IRQS: 524544, nr_irqs: 440, preallocated irqs: 16
|
||||
[ 0.004000] Console: colour VGA+ 80x25
|
||||
[ 0.004000] console [tty1] enabled
|
||||
[ 0.004000] console [ttyS0] enabled
|
||||
[ 0.004000] ACPI: Core revision 20170831
|
||||
[ 0.004000] ACPI: 2 ACPI AML tables successfully acquired and loaded
|
||||
[ 0.004000] APIC: Switch to symmetric I/O mode setup
|
||||
[ 0.004000] x2apic enabled
|
||||
[ 0.004000] Switched APIC routing to physical x2apic.
|
||||
[ 0.007480] ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1
|
||||
[ 0.008012] tsc: Detected 2793.544 MHz processor
|
||||
[ 0.009282] Calibrating delay loop (skipped) preset value.. 5587.08 BogoMIPS (lpj=11174176)
|
||||
[ 0.012002] pid_max: default: 32768 minimum: 301
|
||||
[ 0.013301] Security Framework initialized
|
||||
[ 0.014461] Yama: becoming mindful.
|
||||
[ 0.016030] AppArmor: AppArmor initialized
|
||||
[ 0.018507] Dentry cache hash table entries: 131072 (order: 8, 1048576 bytes)
|
||||
[ 0.020084] Inode-cache hash table entries: 65536 (order: 7, 524288 bytes)
|
||||
[ 0.021890] Mount-cache hash table entries: 2048 (order: 2, 16384 bytes)
|
||||
[ 0.024007] Mountpoint-cache hash table entries: 2048 (order: 2, 16384 bytes)
|
||||
[ 0.026234] mce: CPU supports 0 MCE banks
|
||||
[ 0.027377] Last level iTLB entries: 4KB 1024, 2MB 1024, 4MB 1024
|
||||
[ 0.028003] Last level dTLB entries: 4KB 1024, 2MB 1024, 4MB 1024, 1GB 4
|
||||
[ 0.029726] Spectre V2 : Mitigation: Full generic retpoline
|
||||
[ 0.031210] Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch
|
||||
[ 0.032002] Speculative Store Bypass: Vulnerable
|
||||
[ 0.036269] Freeing SMP alternatives memory: 36K
|
||||
[ 0.040000] smpboot: CPU0: Intel(R) Core(TM) i7-4810MQ CPU @ 2.80GHz (family: 0x6, model: 0x3c, stepping: 0x3)
|
||||
[ 0.040000] Performance Events: unsupported p6 CPU model 60 no PMU driver, software events only.
|
||||
[ 0.040040] Hierarchical SRCU implementation.
|
||||
[ 0.041924] NMI watchdog: Perf event create on CPU 0 failed with -2
|
||||
[ 0.044002] NMI watchdog: Perf NMI watchdog permanently disabled
|
||||
[ 0.045643] smp: Bringing up secondary CPUs ...
|
||||
[ 0.048117] x86: Booting SMP configuration:
|
||||
[ 0.049286] .... node #0, CPUs: #1
|
||||
[ 0.004000] kvm-clock: cpu 1, msr 0:3ff44041, secondary cpu clock
|
||||
[ 0.004000] mce: CPU supports 0 MCE banks
|
||||
[ 0.052017] smp: Brought up 1 node, 2 CPUs
|
||||
[ 0.053262] smpboot: Max logical packages: 1
|
||||
[ 0.054565] smpboot: Total of 2 processors activated (11174.17 BogoMIPS)
|
||||
[ 0.056151] devtmpfs: initialized
|
||||
[ 0.057155] x86/mm: Memory block size: 128MB
|
||||
[ 0.060364] evm: security.selinux
|
||||
[ 0.061435] evm: security.SMACK64
|
||||
[ 0.062493] evm: security.SMACK64EXEC
|
||||
[ 0.064003] evm: security.SMACK64TRANSMUTE
|
||||
[ 0.065263] evm: security.SMACK64MMAP
|
||||
[ 0.066422] evm: security.apparmor
|
||||
[ 0.067525] evm: security.ima
|
||||
[ 0.068003] evm: security.capability
|
||||
[ 0.069155] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns
|
||||
[ 0.072014] futex hash table entries: 512 (order: 3, 32768 bytes)
|
||||
[ 0.073929] pinctrl core: initialized pinctrl subsystem
|
||||
[ 0.077318] RTC time: 13:17:15, date: 08/21/19
|
||||
[ 0.080067] NET: Registered protocol family 16
|
||||
[ 0.081619] audit: initializing netlink subsys (disabled)
|
||||
[ 0.083228] audit: type=2000 audit(1566393441.379:1): state=initialized audit_enabled=0 res=1
|
||||
[ 0.084012] cpuidle: using governor ladder
|
||||
[ 0.085317] cpuidle: using governor menu
|
||||
[ 0.088095] ACPI: bus type PCI registered
|
||||
[ 0.089318] acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5
|
||||
[ 0.091381] PCI: Using configuration type 1 for base access
|
||||
[ 0.096310] HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages
|
||||
[ 0.098028] ACPI: Added _OSI(Module Device)
|
||||
[ 0.100003] ACPI: Added _OSI(Processor Device)
|
||||
[ 0.101388] ACPI: Added _OSI(3.0 _SCP Extensions)
|
||||
[ 0.102770] ACPI: Added _OSI(Processor Aggregator Device)
|
||||
[ 0.104010] ACPI: Added _OSI(Linux-Dell-Video)
|
||||
[ 0.105388] ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio)
|
||||
[ 0.106981] ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics)
|
||||
[ 0.108425] ACPI: Executed 1 blocks of module-level executable AML code
|
||||
[ 0.122815] ACPI: Interpreter enabled
|
||||
[ 0.124024] ACPI: (supports S0 S5)
|
||||
[ 0.125101] ACPI: Using IOAPIC for interrupt routing
|
||||
[ 0.127258] PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug
|
||||
[ 0.128338] ACPI: Enabled 2 GPEs in block 00 to 07
|
||||
[ 0.148118] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff])
|
||||
[ 0.149896] acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI]
|
||||
[ 0.153436] acpi PNP0A03:00: _OSC: not requesting OS control; OS requires [ExtendedConfig ASPM ClockPM MSI]
|
||||
[ 0.156021] acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge.
|
||||
[ 0.160302] PCI host bridge to bus 0000:00
|
||||
[ 0.161557] pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window]
|
||||
[ 0.163474] pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window]
|
||||
[ 0.164004] pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window]
|
||||
[ 0.166322] pci_bus 0000:00: root bus resource [mem 0x40000000-0xfdffffff window]
|
||||
[ 0.168004] pci_bus 0000:00: root bus resource [bus 00-ff]
|
||||
[ 0.174232] pci 0000:00:01.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7]
|
||||
[ 0.176000] pci 0000:00:01.1: legacy IDE quirk: reg 0x14: [io 0x03f6]
|
||||
[ 0.176004] pci 0000:00:01.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177]
|
||||
[ 0.180003] pci 0000:00:01.1: legacy IDE quirk: reg 0x1c: [io 0x0376]
|
||||
[ 0.201309] pci 0000:00:07.0: quirk: [io 0x4000-0x403f] claimed by PIIX4 ACPI
|
||||
[ 0.203547] pci 0000:00:07.0: quirk: [io 0x4100-0x410f] claimed by PIIX4 SMB
|
||||
[ 0.217797] ACPI: PCI Interrupt Link [LNKA] (IRQs 5 9 10 *11)
|
||||
[ 0.220174] ACPI: PCI Interrupt Link [LNKB] (IRQs 5 9 *10 11)
|
||||
[ 0.222067] ACPI: PCI Interrupt Link [LNKC] (IRQs 5 *9 10 11)
|
||||
[ 0.224240] ACPI: PCI Interrupt Link [LNKD] (IRQs 5 9 10 *11)
|
||||
[ 0.226424] SCSI subsystem initialized
|
||||
[ 0.228057] pci 0000:00:02.0: vgaarb: setting as boot VGA device
|
||||
[ 0.229738] pci 0000:00:02.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
|
||||
[ 0.232000] pci 0000:00:02.0: vgaarb: bridge control possible
|
||||
[ 0.232002] vgaarb: loaded
|
||||
[ 0.232965] ACPI: bus type USB registered
|
||||
[ 0.236025] usbcore: registered new interface driver usbfs
|
||||
[ 0.237685] usbcore: registered new interface driver hub
|
||||
[ 0.239213] usbcore: registered new device driver usb
|
||||
[ 0.240070] EDAC MC: Ver: 3.0.0
|
||||
[ 0.241382] PCI: Using ACPI for IRQ routing
|
||||
[ 0.244369] NetLabel: Initializing
|
||||
[ 0.245425] NetLabel: domain hash size = 128
|
||||
[ 0.246772] NetLabel: protocols = UNLABELED CIPSOv4 CALIPSO
|
||||
[ 0.248000] NetLabel: unlabeled traffic allowed by default
|
||||
[ 0.248154] clocksource: Switched to clocksource kvm-clock
|
||||
[ 0.279557] VFS: Disk quotas dquot_6.6.0
|
||||
[ 0.280791] VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes)
|
||||
[ 0.282848] AppArmor: AppArmor Filesystem Enabled
|
||||
[ 0.284308] pnp: PnP ACPI init
|
||||
[ 0.287566] pnp: PnP ACPI: found 3 devices
|
||||
[ 0.298595] clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns
|
||||
[ 0.301333] NET: Registered protocol family 2
|
||||
[ 0.304078] TCP established hash table entries: 8192 (order: 4, 65536 bytes)
|
||||
[ 0.306074] TCP bind hash table entries: 8192 (order: 5, 131072 bytes)
|
||||
[ 0.307943] TCP: Hash tables configured (established 8192 bind 8192)
|
||||
[ 0.309792] UDP hash table entries: 512 (order: 2, 16384 bytes)
|
||||
[ 0.311464] UDP-Lite hash table entries: 512 (order: 2, 16384 bytes)
|
||||
[ 0.313306] NET: Registered protocol family 1
|
||||
[ 0.314657] pci 0000:00:00.0: Limiting direct PCI/PCI transfers
|
||||
[ 0.316602] pci 0000:00:01.0: Activating ISA DMA hang workarounds
|
||||
[ 0.318340] pci 0000:00:02.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
|
||||
[ 0.320929] Unpacking initramfs...
|
||||
[ 0.839404] Freeing initrd memory: 18980K
|
||||
[ 0.840899] platform rtc_cmos: registered platform RTC device (no PNP device found)
|
||||
[ 0.843196] Scanning for low memory corruption every 60 seconds
|
||||
[ 0.845930] Initialise system trusted keyrings
|
||||
[ 0.847240] Key type blacklist registered
|
||||
[ 0.848636] workingset: timestamp_bits=36 max_order=18 bucket_order=0
|
||||
[ 0.852978] zbud: loaded
|
||||
[ 0.854749] squashfs: version 4.0 (2009/01/31) Phillip Lougher
|
||||
[ 0.856806] fuse init (API version 7.26)
|
||||
[ 0.861979] Key type asymmetric registered
|
||||
[ 0.863131] Asymmetric key parser 'x509' registered
|
||||
[ 0.864500] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 246)
|
||||
[ 0.866598] io scheduler noop registered
|
||||
[ 0.867710] io scheduler deadline registered
|
||||
[ 0.868974] io scheduler cfq registered (default)
|
||||
[ 0.870645] ACPI: AC Adapter [AC] (on-line)
|
||||
[ 0.871869] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input0
|
||||
[ 0.874050] ACPI: Power Button [PWRF]
|
||||
[ 0.875182] input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input1
|
||||
[ 0.877282] ACPI: Sleep Button [SLPF]
|
||||
[ 0.880313] Serial: 8250/16550 driver, 32 ports, IRQ sharing enabled
|
||||
[ 0.880387] ACPI: Battery Slot [BAT0] (battery present)
|
||||
| ||||