[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#934168: linux-image-4.19.0-5-amd64: iptables-restore may result in NULL pointer dereference at nf_tables_newrule on startup



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Package: src:linux
Version: 4.19.37-5+deb10u1
Severity: normal
X-Debbugs-Cc: elias@werberich.de


Dear Kernel Maintainer,

I found a reproducible bug which causes a linux kernel oops if netfilter-persistence.service
tries to load IPv4 firewall rules on startup by calling iptables-restore with the following
content as input:

*filter
:INPUT ACCEPT [0:0]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [0:0]
:MY-ICMP - [0:0]
- -A INPUT -j MY-ICMP
- -A MY-ICMP -p icmp -m icmp --icmp-type 3 -j ACCEPT
- -A MY-ICMP -p icmp -m icmp --icmp-type 11 -j ACCEPT
- -A MY-ICMP -p icmp -m icmp --icmp-type 8 -m limit --limit 4/sec -j ACCEPT
COMMIT

I was able to create this simple ruleset out of a more complex firewall configuration.
This kernel oops appears on nine out of ten startups/reboots.
If it appears, iptables/nftables are not usable anymore.
For more details, consult kernel log.

Steps to reproduce the kernel oops:

# Install a fresh, minimal Debian 10 Buster system. (e.g. new VM)
$ apt update
$ apt install iptables iptables-persistent
# Save IPv4 rules on installation, do not save IPv6 rules.
$ cat << \EOF > /etc/iptables/rules.v4
*filter
:INPUT ACCEPT [0:0]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [0:0]
:MY-ICMP - [0:0]
- -A INPUT -j MY-ICMP
- -A MY-ICMP -p icmp -m icmp --icmp-type 3 -j ACCEPT
- -A MY-ICMP -p icmp -m icmp --icmp-type 11 -j ACCEPT
- -A MY-ICMP -p icmp -m icmp --icmp-type 8 -m limit --limit 4/sec -j ACCEPT
COMMIT
EOF
$ reboot

You may need to reboot a second or third time, if it does not appear on the first startup.

I was able to reproduce this on AMD64 using VirtualBox VM and a cloud server provider.
It may cause a broken firewall configuration which leads to a security issue if you reboot
without monitoring.

Using Debian Kernel "4.19.37-6" does not fix this bug.

Yours sincerely,

Elias Werberich


- - -- Package-specific info:
** Version:
Linux version 4.19.0-5-amd64 (debian-kernel@lists.debian.org) (gcc version 8.3.0 (Debian 8.3.0-6)) #1 SMP Debian 4.19.37-5+deb10u1 (2019-07-19)

** Command line:
BOOT_IMAGE=/boot/vmlinuz-4.19.0-5-amd64 root=UUID=4401db16-23d5-4976-b271-4cd53925c0b9 ro quiet

** Tainted: D (128)
 * Kernel has oopsed before.

** Kernel log:
[    2.896496] BUG: unable to handle kernel NULL pointer dereference at 0000000000000327
[    2.896497] PGD 0 P4D 0 
[    2.896499] Oops: 0000 [#1] SMP PTI
[    2.896506] CPU: 0 PID: 285 Comm: iptables-restor Not tainted 4.19.0-5-amd64 #1 Debian 4.19.37-5+deb10u1
[    2.896507] Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
[    2.896512] RIP: 0010:module_put+0xe/0x80
[    2.896513] Code: 8e 00 48 8b 4d 00 48 85 c9 75 e4 eb 98 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 0f 1f 44 00 00 48 85 ff 74 71 41 54 55 53 <8b> 87 28 03 00 00 89 c2 83 ea 01 78 61 f0 0f b1 97 28 03 00 00 75
[    2.896514] RSP: 0018:ffffa4e0809ef990 EFLAGS: 00010286
[    2.896515] RAX: ffff891f597f3a00 RBX: 0000000000000002 RCX: 0000000000000005
[    2.896516] RDX: 0000000000000005 RSI: ffffffffc06a52d0 RDI: ffffffffffffffff
[    2.896516] RBP: ffff891f582f8120 R08: 0000000000000000 R09: 0000000000000074
[    2.896517] R10: ffffa4e0809ef8f8 R11: 0000000000000001 R12: 00000000000000a0
[    2.896517] R13: 00000000fffffff5 R14: 0000000000000003 R15: ffffa4e0809efad8
[    2.896518] FS:  00007f1be82c4740(0000) GS:ffff891f5ba00000(0000) knlGS:0000000000000000
[    2.896519] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[    2.896519] CR2: 0000000000000327 CR3: 000000011672e005 CR4: 00000000000606f0
[    2.896521] Call Trace:
[    2.896533]  nf_tables_newrule+0x5e3/0x950 [nf_tables]
[    2.896536]  ? __handle_mm_fault+0xc62/0x1270
[    2.896538]  nfnetlink_rcv_batch+0x4aa/0x660 [nfnetlink]
[    2.896540]  ? nfnetlink_rcv_msg+0x13c/0x260 [nfnetlink]
[    2.896545]  ? __skb_try_recv_datagram+0xd6/0x180
[    2.896548]  ? refcount_inc_checked+0x5/0x30
[    2.896550]  ? apparmor_capable+0x72/0xa0
[    2.896552]  ? nla_parse+0x31/0xe0
[    2.896553]  nfnetlink_rcv+0x10c/0x141 [nfnetlink]
[    2.896555]  netlink_unicast+0x1bd/0x260
[    2.896562]  netlink_sendmsg+0x204/0x3d0
[    2.896564]  sock_sendmsg+0x36/0x40
[    2.896567]  ___sys_sendmsg+0x295/0x2f0
[    2.896569]  ? filemap_map_pages+0x360/0x3a0
[    2.896571]  ? refcount_inc_checked+0x5/0x30
[    2.896571]  ? apparmor_capable+0x72/0xa0
[    2.896573]  ? security_capable+0x35/0x50
[    2.896575]  ? release_sock+0x19/0x90
[    2.896578]  ? _raw_spin_unlock_bh+0xa/0x20
[    2.896579]  __sys_sendmsg+0x57/0xa0
[    2.896582]  do_syscall_64+0x53/0x110
[    2.896587]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[    2.896590] RIP: 0033:0x7f1be83c6914
[    2.896591] Code: 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b5 0f 1f 80 00 00 00 00 48 8d 05 e9 5d 0c 00 8b 00 85 c0 75 13 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 54 c3 0f 1f 00 41 54 41 89 d4 55 48 89 f5 53
[    2.896592] RSP: 002b:00007fffada99168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[    2.896593] RAX: ffffffffffffffda RBX: 00007fffada99180 RCX: 00007f1be83c6914
[    2.896594] RDX: 0000000000000000 RSI: 00007fffada9a200 RDI: 0000000000000003
[    2.896594] RBP: 00007fffada9a880 R08: 0000000000000004 R09: 0000000000000000
[    2.896595] R10: 00007fffada9a1ec R11: 0000000000000246 R12: 000056216ab4eb40
[    2.896595] R13: 00007fffada9d150 R14: 00007fffada99170 R15: 00007fffada9d188
[    2.896596] Modules linked in: nft_limit vmwgfx(+) nft_counter crct10dif_pclmul crc32_pclmul ttm xt_limit drm_kms_helper snd_intel8x0(+) ghash_clmulni_intel snd_ac97_codec nft_compat ac97_bus intel_rapl_perf drm snd_pcm snd_timer evdev joydev sg snd serio_raw pcspkr soundcore vboxguest nf_tables battery nfnetlink ac video button ip_tables x_tables autofs4 ext4 crc16 mbcache jbd2 crc32c_generic fscrypto ecb sr_mod sd_mod cdrom hid_generic usbhid hid crc32c_intel ahci xhci_pci libahci xhci_hcd libata aesni_intel usbcore scsi_mod aes_x86_64 crypto_simd cryptd glue_helper psmouse usb_common e1000 i2c_piix4
[    2.896617] CR2: 0000000000000327
[    2.896619] ---[ end trace 540ba13c8abe79e8 ]---
[    2.896620] RIP: 0010:module_put+0xe/0x80
[    2.896621] Code: 8e 00 48 8b 4d 00 48 85 c9 75 e4 eb 98 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 0f 1f 44 00 00 48 85 ff 74 71 41 54 55 53 <8b> 87 28 03 00 00 89 c2 83 ea 01 78 61 f0 0f b1 97 28 03 00 00 75
[    2.896621] RSP: 0018:ffffa4e0809ef990 EFLAGS: 00010286
[    2.896622] RAX: ffff891f597f3a00 RBX: 0000000000000002 RCX: 0000000000000005
[    2.896622] RDX: 0000000000000005 RSI: ffffffffc06a52d0 RDI: ffffffffffffffff
[    2.896623] RBP: ffff891f582f8120 R08: 0000000000000000 R09: 0000000000000074
[    2.896623] R10: ffffa4e0809ef8f8 R11: 0000000000000001 R12: 00000000000000a0
[    2.896624] R13: 00000000fffffff5 R14: 0000000000000003 R15: ffffa4e0809efad8
[    2.896625] FS:  00007f1be82c4740(0000) GS:ffff891f5ba00000(0000) knlGS:0000000000000000
[    2.896625] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[    2.896626] CR2: 0000000000000327 CR3: 000000011672e005 CR4: 00000000000606f0
[    2.991528] fbcon: svgadrmfb (fb0) is primary device
[    2.993819] Console: switching to colour frame buffer device 100x37
[    2.995764] [drm] Initialized vmwgfx 2.15.0 20180704 for 0000:00:02.0 on minor 0
[    3.036976] snd_intel8x0 0000:00:05.0: white list rate for 1028:0177 is 48000
[    3.111403] IPv6: ADDRCONF(NETDEV_UP): enp0s8: link is not ready
[    3.113781] IPv6: ADDRCONF(NETDEV_UP): enp0s3: link is not ready
[    5.127519] e1000: enp0s8 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[    5.128925] e1000: enp0s3 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[    5.130060] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s8: link becomes ready
[    5.130243] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s3: link becomes ready

** Model information
sys_vendor: innotek GmbH
product_name: VirtualBox
product_version: 1.2
chassis_vendor: Oracle Corporation
chassis_version: 
bios_vendor: innotek GmbH
bios_version: VirtualBox
board_vendor: Oracle Corporation
board_name: VirtualBox
board_version: 1.2

** Loaded modules:
nft_limit
vmwgfx
nft_counter
crct10dif_pclmul
crc32_pclmul
ttm
xt_limit
drm_kms_helper
snd_intel8x0
ghash_clmulni_intel
snd_ac97_codec
nft_compat
ac97_bus
intel_rapl_perf
drm
snd_pcm
snd_timer
evdev
joydev
sg
snd
serio_raw
pcspkr
soundcore
vboxguest
nf_tables
battery
nfnetlink
ac
video
button
ip_tables
x_tables
autofs4
ext4
crc16
mbcache
jbd2
crc32c_generic
fscrypto
ecb
sr_mod
sd_mod
cdrom
hid_generic
usbhid
hid
crc32c_intel
ahci
xhci_pci
libahci
xhci_hcd
libata
aesni_intel
usbcore
scsi_mod
aes_x86_64
crypto_simd
cryptd
glue_helper
psmouse
usb_common
e1000
i2c_piix4

** Network interface configuration:
# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).

source /etc/network/interfaces.d/*

# The loopback network interface
auto lo
iface lo inet loopback

# The primary network interface
allow-hotplug enp0s3
iface enp0s3 inet dhcp

allow-hotplug enp0s8
iface enp0s8 inet dhcp

** Network status:
*** IP interfaces and addresses:
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: enp0s3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    link/ether 08:00:27:08:22:2d brd ff:ff:ff:ff:ff:ff
    inet 10.0.2.15/24 brd 10.0.2.255 scope global dynamic enp0s3
       valid_lft 85924sec preferred_lft 85924sec
    inet6 fe80::a00:27ff:fe08:222d/64 scope link 
       valid_lft forever preferred_lft forever
3: enp0s8: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    link/ether 08:00:27:14:d2:d3 brd ff:ff:ff:ff:ff:ff
    inet 10.251.3.103/24 brd 10.251.3.255 scope global dynamic enp0s8
       valid_lft 725sec preferred_lft 725sec
    inet6 fe80::a00:27ff:fe14:d2d3/64 scope link 
       valid_lft forever preferred_lft forever

*** Device statistics:
Inter-|   Receive                                                |  Transmit
 face |bytes    packets errs drop fifo frame compressed multicast|bytes    packets errs drop fifo colls carrier compressed
enp0s8:   98149    1170    0    0    0     0          0         0   664351    1148    0    0    0     0       0          0
    lo:       0       0    0    0    0     0          0         0        0       0    0    0    0     0       0          0
enp0s3:  463977     455    0    0    0     0          0         0    29036     288    0    0    0     0       0          0


** PCI devices:
00:00.0 Host bridge [0600]: Intel Corporation 440FX - 82441FX PMC [Natoma] [8086:1237] (rev 02)
	Control: I/O- Mem- BusMaster- SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap- 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-

00:01.0 ISA bridge [0601]: Intel Corporation 82371SB PIIX3 ISA [Natoma/Triton II] [8086:7000]
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap- 66MHz- UDF- FastB2B- ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0

00:02.0 VGA compatible controller [0300]: VMware SVGA II Adapter [15ad:0405] (prog-if 00 [VGA controller])
	Subsystem: VMware SVGA II Adapter [15ad:0405]
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap- 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 64
	Interrupt: pin A routed to IRQ 18
	Region 0: I/O ports at d000 [size=16]
	Region 1: Memory at f0000000 (32-bit, non-prefetchable) [size=64M]
	Region 2: Memory at f4000000 (32-bit, non-prefetchable) [size=2M]
	[virtual] Expansion ROM at 000c0000 [disabled] [size=128K]
	Kernel driver in use: vmwgfx
	Kernel modules: vmwgfx

00:03.0 Ethernet controller [0200]: Intel Corporation 82540EM Gigabit Ethernet Controller [8086:100e] (rev 02)
	Subsystem: Intel Corporation PRO/1000 MT Desktop Adapter [8086:001e]
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz+ UDF- FastB2B- ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 64 (63750ns min)
	Interrupt: pin A routed to IRQ 19
	Region 0: Memory at f4200000 (32-bit, non-prefetchable) [size=128K]
	Region 2: I/O ports at d010 [size=8]
	Capabilities: [dc] Power Management version 2
		Flags: PMEClk- DSI+ D1- D2- AuxCurrent=0mA PME(D0-,D1-,D2-,D3hot-,D3cold-)
		Status: D0 NoSoftRst- PME-Enable- DSel=0 DScale=0 PME-
	Capabilities: [e4] PCI-X non-bridge device
		Command: DPERE- ERO+ RBC=512 OST=1
		Status: Dev=ff:1f.0 64bit- 133MHz- SCD- USC- DC=simple DMMRBC=2048 DMOST=1 DMCRS=8 RSCEM- 266MHz- 533MHz-
	Kernel driver in use: e1000
	Kernel modules: e1000

00:04.0 System peripheral [0880]: InnoTek Systemberatung GmbH VirtualBox Guest Service [80ee:cafe]
	Control: I/O+ Mem+ BusMaster- SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap- 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Interrupt: pin A routed to IRQ 20
	Region 0: I/O ports at d020 [size=32]
	Region 1: Memory at f4400000 (32-bit, non-prefetchable) [size=4M]
	Region 2: Memory at f4800000 (32-bit, prefetchable) [size=16K]
	Kernel driver in use: vboxguest
	Kernel modules: vboxguest

00:05.0 Multimedia audio controller [0401]: Intel Corporation 82801AA AC'97 Audio Controller [8086:2415] (rev 01)
	Subsystem: Dell 82801AA AC'97 Audio Controller [1028:0177]
	Control: I/O+ Mem- BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap- 66MHz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 64
	Interrupt: pin A routed to IRQ 21
	Region 0: I/O ports at d100 [size=256]
	Region 1: I/O ports at d200 [size=64]
	Kernel driver in use: snd_intel8x0
	Kernel modules: snd_intel8x0

00:07.0 Bridge [0680]: Intel Corporation 82371AB/EB/MB PIIX4 ACPI [8086:7113] (rev 08)
	Control: I/O- Mem- BusMaster- SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap- 66MHz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Interrupt: pin A routed to IRQ 9
	Kernel driver in use: piix4_smbus
	Kernel modules: i2c_piix4

00:08.0 Ethernet controller [0200]: Intel Corporation 82540EM Gigabit Ethernet Controller [8086:100e] (rev 02)
	Subsystem: Intel Corporation PRO/1000 MT Desktop Adapter [8086:001e]
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz+ UDF- FastB2B- ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 64 (63750ns min)
	Interrupt: pin A routed to IRQ 16
	Region 0: Memory at f4820000 (32-bit, non-prefetchable) [size=128K]
	Region 2: I/O ports at d240 [size=8]
	Capabilities: [dc] Power Management version 2
		Flags: PMEClk- DSI+ D1- D2- AuxCurrent=0mA PME(D0-,D1-,D2-,D3hot-,D3cold-)
		Status: D0 NoSoftRst- PME-Enable- DSel=0 DScale=0 PME-
	Capabilities: [e4] PCI-X non-bridge device
		Command: DPERE- ERO+ RBC=512 OST=1
		Status: Dev=ff:1f.0 64bit- 133MHz- SCD- USC- DC=simple DMMRBC=2048 DMOST=1 DMCRS=8 RSCEM- 266MHz- 533MHz-
	Kernel driver in use: e1000
	Kernel modules: e1000

00:0c.0 USB controller [0c03]: Intel Corporation 7 Series/C210 Series Chipset Family USB xHCI Host Controller [8086:1e31] (prog-if 30 [XHCI])
	Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV+ VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 64, Cache Line Size: 64 bytes
	Interrupt: pin A routed to IRQ 20
	Region 0: Memory at f4840000 (32-bit, non-prefetchable) [size=64K]
	Kernel driver in use: xhci_hcd
	Kernel modules: xhci_pci

00:0d.0 SATA controller [0106]: Intel Corporation 82801HM/HEM (ICH8M/ICH8M-E) SATA Controller [AHCI mode] [8086:2829] (rev 02) (prog-if 01 [AHCI 1.0])
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 64
	Interrupt: pin A routed to IRQ 21
	Region 0: I/O ports at d248 [size=8]
	Region 1: I/O ports at d250 [size=4]
	Region 2: I/O ports at d258 [size=8]
	Region 3: I/O ports at d260 [size=4]
	Region 4: I/O ports at d270 [size=16]
	Region 5: Memory at f4850000 (32-bit, non-prefetchable) [size=8K]
	Capabilities: [70] Power Management version 3
		Flags: PMEClk- DSI- D1- D2- AuxCurrent=0mA PME(D0-,D1-,D2-,D3hot-,D3cold-)
		Status: D0 NoSoftRst- PME-Enable- DSel=0 DScale=0 PME-
	Capabilities: [a8] SATA HBA v1.0 BAR4 Offset=00000002
	Kernel driver in use: ahci
	Kernel modules: ahci


** USB devices:
Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 001 Device 002: ID 80ee:0021 VirtualBox USB Tablet
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub


- - -- System Information:
Debian Release: 10.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-5-amd64 (SMP w/2 CPU cores)
Kernel taint flags: TAINT_DIE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages linux-image-4.19.0-5-amd64 depends on:
ii  initramfs-tools [linux-initramfs-tool]  0.133
ii  kmod                                    26-1
ii  linux-base                              4.6

Versions of packages linux-image-4.19.0-5-amd64 recommends:
ii  apparmor             2.13.2-10
ii  firmware-linux-free  3.4

Versions of packages linux-image-4.19.0-5-amd64 suggests:
pn  debian-kernel-handbook  <none>
ii  grub-pc                 2.02+dfsg1-20
pn  linux-doc-4.19          <none>

Versions of packages linux-image-4.19.0-5-amd64 is related to:
pn  firmware-amd-graphics     <none>
pn  firmware-atheros          <none>
pn  firmware-bnx2             <none>
pn  firmware-bnx2x            <none>
pn  firmware-brcm80211        <none>
pn  firmware-cavium           <none>
pn  firmware-intel-sound      <none>
pn  firmware-intelwimax       <none>
pn  firmware-ipw2x00          <none>
pn  firmware-ivtv             <none>
pn  firmware-iwlwifi          <none>
pn  firmware-libertas         <none>
pn  firmware-linux-nonfree    <none>
pn  firmware-misc-nonfree     <none>
pn  firmware-myricom          <none>
pn  firmware-netxen           <none>
pn  firmware-qlogic           <none>
pn  firmware-realtek          <none>
pn  firmware-samsung          <none>
pn  firmware-siano            <none>
pn  firmware-ti-connectivity  <none>
pn  xen-hypervisor            <none>

- - -- no debconf information

- -- 
Elias Werberich <elias@werberich.de>
- ------------------------------------
GnuPG-Fingerprint: EB36 7730 B5E7 8968 AE7B  69D1 4FAC B12F 72B8 04B7
GnuPG-Key-ID:      0x4FACB12F72B804B7
-----BEGIN PGP SIGNATURE-----
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=YaVC
-----END PGP SIGNATURE-----


Reply to: