Hi Po-Hsu,
For artful/arm64, when I implemented the test, I hadn't realized
CONFIG_VMAP_STACK had been backported to the 4.13/artful kernel (in
7b7dbeeef3b73294e525f368b03c3890459992a6). I have fixed the qrt test to
reflect that in https://git.launchpad.net/qa-regression-
testing/commit/?id=6cda576b8fc2f3c6f08d7f6a0bd7408918180ab8 .
For bionic 4.15/linux-kvm, the kernel config there is missing having
CONFIG_VMAP_STACK set:
$ grep VMAP_STACK debian.kvm/config/config.common.ubuntu
CONFIG_HAVE_ARCH_VMAP_STACK=y
# CONFIG_VMAP_STACK is not set
The security team would like to see that fixed.
Thanks!
** Also affects: linux (Ubuntu Bionic)
Importance: Undecided
Status: Incomplete
** Also affects: linux-kvm (Ubuntu Bionic)
Importance: Undecided
Status: New
** Changed in: linux-kvm (Ubuntu Bionic)
Status: New => Confirmed
** Changed in: qa-regression-testing
Status: New => Fix Released
** Changed in: linux (Ubuntu Bionic)
Status: Incomplete => Invalid
** Summary changed:
- test_181_config_vmap_stack failed with 4.15 KVM / 4.13 ARM64 kernel
+ linux-kvm 4.15 needs CONFIG_VMAP_STACK set
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux-kvm in Ubuntu.
https://bugs.launchpad.net/bugs/1764985
Title:
linux-kvm 4.15 needs CONFIG_VMAP_STACK set
Status in QA Regression Testing:
Fix Released
Status in linux package in Ubuntu:
Invalid
Status in linux-kvm package in Ubuntu:
Confirmed
Status in linux source package in Bionic:
Invalid
Status in linux-kvm source package in Bionic:
Confirmed
Bug description:
test_181_config_vmap_stack in ubuntu_qrt_kernel_security_test has
failed with 4.15.0-1004-kvm
FAIL: test_181_config_vmap_stack (__main__.KernelSecurityTest)
Ensure kernel stack isolation is set
----------------------------------------------------------------------
Traceback (most recent call last):
File "./test-kernel-security.py", line 2149, in test_181_config_vmap_stack
self.assertEqual(self._get_config('VMAP_STACK'), expected)
AssertionError: None != 'y'
ProblemType: Bug
DistroRelease: Ubuntu 18.04
Package: linux-image-4.15.0-1004-kvm 4.15.0-1004.4
ProcVersionSignature: User Name 4.15.0-1004.4-kvm 4.15.15
Uname: Linux 4.15.0-1004-kvm x86_64
ApportVersion: 2.20.9-0ubuntu5
Architecture: amd64
Date: Wed Apr 18 09:29:03 2018
ProcEnviron:
TERM=xterm-256color
PATH=(custom, no user)
XDG_RUNTIME_DIR=<set>
LANG=C.UTF-8
SHELL=/bin/bash
SourcePackage: linux-kvm
UpgradeStatus: No upgrade log present (probably fresh install)
To manage notifications about this bug go to:
https://bugs.launchpad.net/qa-regression-testing/+bug/1764985/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
