Hi Po-Hsu,
Thanks, I hadn't realized the DEBUG_WX check had been backported to the
4.4 kernel. The security team will consider whether it should be enabled
for the generic kernel in xenial, but for the time being, I've merged
your fix into QRT, modifying it to expect DEBUG_WX for only 4.4 linux-
kvm kernels, and 4.15+ elsewhere. This was commit
https://git.launchpad.net/qa-regression-
testing/commit/?id=46cee41c216eb98fd3e802befe856ec4c4123553 .
Thanks!
** Changed in: qa-regression-testing
Status: New => Fix Released
** Changed in: linux-kvm (Ubuntu)
Status: New => Invalid
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux-kvm in Ubuntu.
https://bugs.launchpad.net/bugs/1788338
Title:
DEBUG_WX is expected to be unset for X-KVM kernel
Status in QA Regression Testing:
Fix Released
Status in ubuntu-kernel-tests:
New
Status in linux-kvm package in Ubuntu:
Invalid
Bug description:
It looks like this config is expected to be unset for X-KVM kernel
FAIL: test_330_config_debug_wx (__main__.KernelSecurityConfigTest)
Ensure DEBUG_WX is set
----------------------------------------------------------------------
Traceback (most recent call last):
File "./test-kernel-security.py", line 2546, in test_330_config_debug_wx
self.assertKernelConfig('DEBUG_WX', expected)
File "./test-kernel-security.py", line 209, in assertKernelConfig
self.assertKernelConfigUnset(name)
File "./test-kernel-security.py", line 200, in assertKernelConfigUnset
'%s option was expected to be unset in the kernel config' % name)
AssertionError: DEBUG_WX option was expected to be unset in the kernel
config
As in the qrt code:
def test_330_config_debug_wx(self):
'''Ensure DEBUG_WX is set'''
expected = True
if not (self.dpkg_arch in ['amd64', 'i386', 'arm64']):
self._skipped("DEBUG_WX is an x86 and arm64 arch feature only")
expected = False
elif not self.kernel_at_least('4.13'):
self._skipped('CONFIG_DEBUG_WX added/enabled in 4.13 and newer')
expected = False
self.assertKernelConfig('DEBUG_WX', expected)
However, the upstream commit
(e1a58320a38dfa72be48a0f1a3a92273663ba6db) to introduce this config
can be found in Xenial kernel as well. Maybe we should consider to
change this from the test case.
ProblemType: Bug
DistroRelease: Ubuntu 16.04
Package: linux-image-4.4.0-1032-kvm 4.4.0-1032.38
ProcVersionSignature: User Name 4.4.0-1032.38-kvm 4.4.140
Uname: Linux 4.4.0-1032-kvm x86_64
ApportVersion: 2.20.1-0ubuntu2.18
Architecture: amd64
Date: Wed Aug 22 04:43:41 2018
SourcePackage: linux-kvm
UpgradeStatus: No upgrade log present (probably fresh install)
To manage notifications about this bug go to:
https://bugs.launchpad.net/qa-regression-testing/+bug/1788338/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
