[Touch-packages] [Bug 2092363] Re: Missing (but referenced) SOF firmware in pc-kernel – No Audio

2025-05-14 Thread Niklas Sombert
As a workaround (taken from https://forum.manjaro.org/t/internal- microphone-in-hp-pavillion-16-is-not-recognized/35414), this gives at least sound output (though no microphones): echo "options snd-hda-intel dmic_detect=0" | sudo tee /etc/modprobe.d/alsa-fix.conf -- You received this bug notific

[Touch-packages] [Bug 2092363] Re: Missing (but referenced) SOF firmware in pc-kernel – No Audio

2025-05-14 Thread Niklas Sombert
To keep this bug on track: There is already 3MB of SOF firmware in the kernel snap: /lib/firmware/intel/sof$ du -csh 3,5M. The whole package firmware-sof-signed is 5MB. So, where's the problem in just adding all of them? -- You received this bug notification because you are a member of Ubu

[Touch-packages] [Bug 2092363] Re: Missing (but referenced) SOF firmware in pc-kernel – No Audio

2025-05-14 Thread Vegard Svanberg
Given the fact this 1) Bothers so many people, 2) Seems to be a bit down on Canonical's priority list, 3) Has no official workaround and 4) The relevant Discourse thread is closed, I'm posting a possible workaround here in case it's useful to someone: WARNING: This is a rough outline. I had to do

[Touch-packages] [Bug 2110688] [NEW] apparmor parser incorrectly treats norelatime mount flag as a no-op

2025-05-14 Thread Ryan Lee
Public bug reported: [ Impact ] The parser did not handle the norelatime mount flag correctly, essentially treating its addition to a list of mount flags as a no-op. A test should also be included to ensure that the behavior is fixed and not broken again. [ Test Plan ] This bug is caught by an

[Touch-packages] [Bug 2110684] [NEW] Ubuntu-bug or apport not working if running it from terminal in just removed directory. Why it needs directory?

2025-05-14 Thread Jānis Kangarooo
Public bug reported: Ubuntu-bug or apport not working if running it from terminal in just removed directory. Why it needs directory? mkdir ~/1 cd ~/1 rmdir ~/1 ubuntu-bug apport ubuntu-bug -w sh: 0: getcwd() failed: No such file or directory Fontconfig error: "/etc/fonts/fonts.conf", line 86: ou

[Touch-packages] [Bug 2110617] Re: Kernel 6.11.0-25 display corruption

2025-05-14 Thread Daniel Letzeisen
Nvidia kernel module is not loading (no kernel module in use listed). 01:00.0 VGA compatible controller [0300]: NVIDIA Corporation AD107GLM [RTX 2000 Ada Generation Laptop GPU] Kernel modules: nvidiafb, nouveau, nvidia_drm, nvidia Do you have SecureBoot enabled? If so, did you sign the N

[Touch-packages] [Bug 2110361] Re: linux ubuntu 24.04 LTS freeze xorg freeze USB stick installation

2025-05-14 Thread Daniel van Vugt
*** This bug is a duplicate of bug 2109992 *** https://bugs.launchpad.net/bugs/2109992 ** This bug has been marked a duplicate of bug 2109992 laptop xorg freeze USB stick memory is 2 GT installation freeze -- You received this bug notification because you are a member of Ubuntu Touch see

[Touch-packages] [Bug 2109992] Re: laptop xorg freeze USB stick memory is 2 GT installation freeze

2025-05-14 Thread Launchpad Bug Tracker
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: xorg (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to xorg in Ubuntu. https://bugs.launchpad.net/bug

[Touch-packages] [Bug 2102033] Re: remmina blocked by apparmor in Plucky

2025-05-14 Thread Ryan Lee
** Description changed: + SRU Justification: + + [ Impact ] + + The remmina profile is missing a bunch of rules that would be needed in + order to allow usage of all its functionality. As such, we will need to + pull the remmina profile from Plucky to avoid breaking its usages. + + [ Test Plan

[Touch-packages] [Bug 2110630] [NEW] apparmor.d man page contains incorrect information about mount flag combinations

2025-05-14 Thread Ryan Lee
Public bug reported: [ Impact ] The apparmor.d man page contained incorrect information about the combination of mount options=(list) options in (list), so this documentation should be fixed, and a test included to ensure that the documented behavior matches the actual behavior. [ Test Plan ] C

[Touch-packages] [Bug 2107596] Re: Apparmor is missing rule for openvpn to set DNS domain

2025-05-14 Thread Ryan Lee
** Description changed: + SRU Justification: + + [ Impact ] + + The openvpn profile lacked permissions to manage DNS settings for pushed + DHCP settings (LP: #2107596) + + [ Test Plan ] + + * This test description assumes no access to existing machines that use OpenVPN. Additional testing of

[Touch-packages] [Bug 2110628] [NEW] apparmor profiles need mr permissions on their own binaries for execution from a confined context

2025-05-14 Thread Ryan Lee
Public bug reported: [ Impact ] Various commands segfaulted when run from a confined context due to missing permissions on the binary execution path, and their corresponding profiles need rules to give m+r permissions for the binaries themselves. [ Test Plan ] * Add the following to a new file

[Touch-packages] [Bug 2107727] Re: iotop-c: Call of nl_init fails due to insufficient rights

2025-05-14 Thread Ryan Lee
** Description changed: + [ Impact ] + + iotop-c failed to launch at all due to permission denials in nl_init and + missing capabilities in the iotop-c profile. + + [ Test Plan ] + + * Launch iotop-c under sudo (make sure to invoke iotop-c directly instead of iotop, which might be symlinked t

[Touch-packages] [Bug 2110626] [NEW] apparmor fusermount3 profile disallows noatime flag, breaking fuse-overlayfs

2025-05-14 Thread Ryan Lee
Public bug reported: [ Impact ] fusermount3 lacked permissions to mount with noatime, which is needed to use fuse_overlayfs. [ Test Plan ] After installation of the new AppArmor version, the machine might need to be rebooted. If a reboot between installation and test plan execution is needed fo

[Touch-packages] [Bug 2109029] Re: AppArmor OpenVPN profile blocks mDNS lookups

2025-05-14 Thread Ryan Lee
** Description changed: + SRU Justification: + + [ Impact ] + Configuration of an OpenVPN client with a "remote some_hostname.local" rule on Plucky fails because the OpenVPN profile does not allow access to /run/avahi-daemon/socket for mDNS lookups. + + [ Test Plan ] + + Test plan for th

[Touch-packages] [Bug 2110624] [NEW] apparmor fusermount3 profile blocks mounts to /cvmfs/ subdirectories

2025-05-14 Thread Ryan Lee
Public bug reported: SRU Justification: [ Impact ] fusermount3 lacked permissions to mount to /cvmfs subdirectories, breaking usage of the CernVM FS. [ Test Plan ] * The following instructions are adapted from https://cvmfs.readthedocs.io/en/stable/cpt-quickstart.html - Install the cvmfs

[Touch-packages] [Bug 2107773] Re: Enabling FIPS causes SALT to be 8 bytes, but OpenSSL 3.0.2 checks if SALT is < 16 bytes, breaking Dovecot and possibly other packages.

2025-05-14 Thread Eric Berry
** Description changed: - We deployed Ubuntu Server 22.04 FIPS on Azure as it is now a FIPS - Certified release. See https://ubuntu.com/blog/fips-140-3-for- - ubuntu-22-04lts + [ Impact ] + * When one enables FIPS mode on a Jammy system and then attempts to use Dovecot to create an encrypted mai

[Touch-packages] [Bug 2110460] Re: Merge krb5 from Debian Unstable for questing

2025-05-14 Thread Andreas Hasenack
** Changed in: krb5 (Ubuntu) Assignee: (unassigned) => Andreas Hasenack (ahasenack) -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to krb5 in Ubuntu. https://bugs.launchpad.net/bugs/2110460 Title: Merge krb5 from Debian

[Touch-packages] [Bug 2107723] Re: Using KDE Plasma widget "Web Browser" kill Plasma desktop due to QtWebEngine and AppArmor restrictions

2025-05-14 Thread Ryan Lee
** Description changed: + SRU Justification: + + [ Impact ] + + The plasmashell profile was missing the new path to QtWebEngineProcess, + causing the entire desktop environment to crash upon attempted usage of + the Web Browser widget. + + [ Test Plan ] + + This test needs to be executed on a

[Touch-packages] [Bug 2110616] [NEW] apparmor unprivileged_userns profile missing access to /

2025-05-14 Thread Ryan Lee
Public bug reported: [ Impact ] The unprivileged_userns profile did not grant access to the root directory, which was an oversight in a profile that is intended to allow almost all accesses except for capabilities usage. This would e.g. break listing of the root directory contents from a user nam

[Touch-packages] [Bug 2101180] Re: Multiple DENIED apparmor messages when using rsyslog with the imfile module

2025-05-14 Thread Andreas Hasenack
** Changed in: rsyslog (Ubuntu Plucky) Status: In Progress => Confirmed ** Changed in: rsyslog (Ubuntu) Assignee: (unassigned) => Andreas Hasenack (ahasenack) -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to rsyslo

[Touch-packages] [Bug 2107455] Re: segfault of lsblk s390x in containers due to apparmor

2025-05-14 Thread Ryan Lee
** Description changed: SRU Justification: [ Impact ] - * lsblk on an s390x system that uses DASD disks shows no output. - - * journactl shows lsblk is blocked by apparmor: -2025-04-15T15:02:26.048075+00:00 s5lp1-gen03 kernel: audit: type=1400 -audit(1744729346.034:270): appar

[Touch-packages] [Bug 2110617] [NEW] Kernel 6.11.0-25 display corruption

2025-05-14 Thread astroscion
Public bug reported: Hi, After a recent kernel update on my Ubuntu system from 6.11.0-24 to 6.11.0-25 , I had to reinstall the NVIDIA driver 550. Since then, I’m seeing an issue: - When using extended display mode (laptop screen + external monitor), - The laptop screen flickers or glitches for a

[Touch-packages] [Bug 2085192] Re: Backport new upstream microrelease 2.5.19 to jammy

2025-05-14 Thread Launchpad Bug Tracker
This bug was fixed in the package openldap - 2.5.19+dfsg-0ubuntu0.22.04.1 --- openldap (2.5.19+dfsg-0ubuntu0.22.04.1) jammy; urgency=medium * New upstream version (LP: #2085192) - Fixed libldap GnuTLS incompatible pointer type (ITS#10253) - Fixed libldap OpenSSL set_ciphersu

[Touch-packages] [Bug 2085192] Update Released

2025-05-14 Thread Andreas Hasenack
The verification of the Stable Release Update for openldap has completed successfully and the package is now being released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a

[Touch-packages] [Bug 2085192] Re: Backport new upstream microrelease 2.5.19 to jammy

2025-05-14 Thread Bryce Harrington
** Changed in: openldap (Ubuntu Plucky) Status: In Progress => Fix Released ** Changed in: openldap (Ubuntu) Status: In Progress => Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to openldap in Ubuntu