This bug is missing log files that will aid in diagnosing the problem.
>From a terminal window please run:

apport-collect 1677959

and then change the status of the bug to 'Confirmed'.

If, due to the nature of the issue you have encountered, you are unable
to run this command, please add a comment stating that fact and change
the bug status to 'Confirmed'.

This change has been made by an automated script, maintained by the
Ubuntu Kernel Team.

** Changed in: linux (Ubuntu)
       Status: New => Incomplete

** Changed in: linux (Ubuntu Xenial)
       Status: New => Incomplete

** Changed in: linux (Ubuntu Yakkety)
       Status: New => Incomplete

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1677959

Title:
  change_profile incorrect when using namespaces with a compound stack

Status in AppArmor:
  New
Status in linux package in Ubuntu:
  Incomplete
Status in linux source package in Xenial:
  Incomplete
Status in linux source package in Yakkety:
  Incomplete
Status in linux source package in Zesty:
  Incomplete

Bug description:
  When a compound label is used as part of a target namespace the change
  profile will result in a bad change

  a task confined by profile lxd doing
  change_profile(&:ns://foo//&unconfined)

  results in a change_profile to

    :ns://foo
  and
    unconfined

  causing the local system profile to change instead of setting up a stack in 
the sub namespace
  ie.
    unconfined//&:ns://foo
  instead of the expected
    lxd//&:ns://foo//&:ns://unconfined

  https://github.com/lxc/lxd/issues/2981

To manage notifications about this bug go to:
https://bugs.launchpad.net/apparmor/+bug/1677959/+subscriptions

-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to