[Bug 2095370] Re: AppArmor early policy load not funcitoning

2025-02-27 Thread Georgia Garcia
Verification completed on oracular linux/6.11.0-21.21 georgia@sec-oracular-amd64:~$ uname -a Linux sec-oracular-amd64 6.11.0-21-generic #21-Ubuntu SMP PREEMPT_DYNAMIC Wed Feb 19 16:50:40 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux georgia@sec-oracular-amd64:~$ journalctl -b | grep systemd | grep -i

[Bug 2095370] Re: AppArmor early policy load not funcitoning

2025-02-25 Thread Ubuntu Kernel Bot
This bug is awaiting verification that the linux/6.11.0-21.21 kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-oracular-linux' to 'verification-done-oracular- linux'. If the problem sti

[Bug 2095370] Re: AppArmor early policy load not funcitoning

2025-02-20 Thread Georgia Garcia
Verification completed on noble kernel 6.8.0-56.58: $ journalctl -b | grep systemd | grep -i apparmor ... Feb 20 09:50:03 sec3-noble-amd64 kernel: audit: type=1400 audit(1740055803.156:9): apparmor="STATUS" operation="profile_load" profile="unconfined" name="busybox" pid=1 comm="systemd" Feb 20

[Bug 2095370] Re: AppArmor early policy load not funcitoning

2025-02-19 Thread Ubuntu Kernel Bot
This bug is awaiting verification that the linux/6.8.0-56.58 kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-noble-linux' to 'verification-done-noble-linux'. If the problem still exist

[Bug 2095370] Re: AppArmor early policy load not funcitoning

2025-01-28 Thread Georgia Garcia
** Description changed: + SRU Justification: + + [Impact] + + The commit being reverted allows the use of runtime information on + AppArmor features, usually located under + /sys/kernel/security/apparmor/features/ + + The set of features is used to calculate the features' hash, used by + AppArm

[Bug 2095370] Re: AppArmor early policy load not funcitoning

2025-01-23 Thread Georgia Garcia
The bug was caused by a commit [1] in the Ubuntu kernel that would change the kernel features hash based on the status of the userns and io_uring restriction. When the policy cache was generated, userns restriction would be available and the hash under /etc/apparmor/earlypolicy/ would match the set

[Bug 2095370] Re: AppArmor early policy load not funcitoning

2025-01-20 Thread Launchpad Bug Tracker
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: apparmor (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2095370 Title: A