This bug was fixed in the package apparmor - 2.10.95-0ubuntu2.5
---------------
apparmor (2.10.95-0ubuntu2.5) xenial; urgency=medium
* debian/lib/apparmor/functions, debian/apparmor.init,
debian/apparmor.service, debian/apparmor.upstart,
debian/lib/apparmor/profile-load: Adjust the checks that previously kept
AppArmor policy from being loaded while booting a container. Now we
attempt to load policy if we're in a LXD or LXC managed container that is
using profile stacking inside of a policy namespace. (LP: #1628285)
* Fix regression tests for stacking so that the kernel SRU process is not
interrupted by failing tests whenever the AppArmor stacking features are
backported from the 16.10 kernel or when the 16.04 LTS Enablement Stack
receives a 4.8 or newer kernel
- debian/patches/r3509-tests-fix-exec_stack-errors-1.patch: Fix the
exec_stack.sh test when running on 4.8 or newer kernels (LP: #1628745)
- debian/patches/r3558-tests-fix-exec_stack-errors-2.patch: Adjust the
exec_stack.sh fix mentioned above to more accurately test kernels older
than 4.8 (LP: #1630069)
- debian/patches/allow-stacking-tests-to-use-system.patch: Apply this
patch earlier in the series, as to match when it was committed upstream,
so that the above two patches can be cherry-picked from lp:apparmor
-- Tyler Hicks <tyhi...@canonical.com> Fri, 07 Oct 2016 05:21:44 +0000
** Changed in: apparmor (Ubuntu Xenial)
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1628745
Title:
Change in kernel exec transition behavior causes regression tests to
fail
Status in AppArmor:
Fix Committed
Status in apparmor package in Ubuntu:
Fix Released
Status in apparmor source package in Xenial:
Fix Released
Bug description:
[Impact]
* The exec_stack.sh regression test fails due to a behavior change in
4.8 kernels from this patch:
commit 9f834ec18defc369d73ccf9e87a2790bfa05bf46
Author: Linus Torvalds <torva...@linux-foundation.org>
Date: Mon Aug 22 16:41:46 2016 -0700
binfmt_elf: switch to new creds when switching to new mm
* Adjusting the regression tests appropriately allows the kernel and
security teams to use QRT's test-apparmor.py to test kernel and
userspace AppArmor changes with confidence
[Test Case]
$ apt-get source apparmor # make sure this fetches the new apparmor source
$ sudo apt-get install libapparmor-dev
$ cd tests/regression/apparmor
$ make USE_SYSTEM=1
$ sudo bash exec_stack.sh
running exec_stack
/tmp/testlibRpZj1Y/source/yakkety/apparmor-2.10.95/tests/regression/apparmor/prologue.inc:
line 219: 608 Segmentation fault $testexec "$@" > $outfile 2>&1
Error: transition failed. Test 'EXEC_STACK (2 stacked - file)' was expected
to 'fail'. Reason for failure expect errno 13 != 139
/tmp/testlibRpZj1Y/source/yakkety/apparmor-2.10.95/tests/regression/apparmor/prologue.inc:
line 219: 610 Segmentation fault $testexec "$@" > $outfile 2>&1
Error: transition failed. Test 'EXEC_STACK (2 stacked - otherfile)' was
expected to 'fail'. Reason for failure expect errno 13 != 139
/tmp/testlibRpZj1Y/source/yakkety/apparmor-2.10.95/tests/regression/apparmor/prologue.inc:
line 219: 612 Segmentation fault $testexec "$@" > $outfile 2>&1
Error: transition failed. Test 'EXEC_STACK (2 stacked - thirdfile)' was
expected to 'fail'. Reason for failure expect errno 13 != 139
/tmp/testlibRpZj1Y/source/yakkety/apparmor-2.10.95/tests/regression/apparmor/prologue.inc:
line 219: 613 Segmentation fault $testexec "$@" > $outfile 2>&1
Error: transition failed. Test 'EXEC_STACK (2 stacked - sharedfile)' was
expected to 'pass'. Reason for failure 'killed by signal 11'
/tmp/testlibRpZj1Y/source/yakkety/apparmor-2.10.95/tests/regression/apparmor/prologue.inc:
line 219: 620 Segmentation fault $testexec "$@" > $outfile 2>&1
Error: transition failed. Test 'EXEC_STACK (2 stacked - okcon)' was expected
to 'pass'. Reason for failure 'killed by signal 11'
/tmp/testlibRpZj1Y/source/yakkety/apparmor-2.10.95/tests/regression/apparmor/prologue.inc:
line 219: 628 Segmentation fault $testexec "$@" > $outfile 2>&1
Error: transition failed. Test 'EXEC_STACK (2 stacked - bad label)' was
expected to 'fail'. Reason for failure 'killed by signal 11'
/tmp/testlibRpZj1Y/source/yakkety/apparmor-2.10.95/tests/regression/apparmor/prologue.inc:
line 219: 634 Segmentation fault $testexec "$@" > $outfile 2>&1
Error: transition failed. Test 'EXEC_STACK (2 stacked - bad mode)' was
expected to 'fail'. Reason for failure 'killed by signal 11'
/tmp/testlibRpZj1Y/source/yakkety/apparmor-2.10.95/tests/regression/apparmor/prologue.inc:
line 219: 741 Segmentation fault $testexec "$@" > $outfile 2>&1
Error: transition failed. Test 'EXEC_STACK (3 stacked - file)' was expected
to 'fail'. Reason for failure expect errno 13 != 139
/tmp/testlibRpZj1Y/source/yakkety/apparmor-2.10.95/tests/regression/apparmor/prologue.inc:
line 219: 745 Segmentation fault $testexec "$@" > $outfile 2>&1
Error: transition failed. Test 'EXEC_STACK (3 stacked - otherfile)' was
expected to 'fail'. Reason for failure expect errno 13 != 139
/tmp/testlibRpZj1Y/source/yakkety/apparmor-2.10.95/tests/regression/apparmor/prologue.inc:
line 219: 747 Segmentation fault $testexec "$@" > $outfile 2>&1
Error: transition failed. Test 'EXEC_STACK (3 stacked - thirdfile)' was
expected to 'fail'. Reason for failure expect errno 13 != 139
/tmp/testlibRpZj1Y/source/yakkety/apparmor-2.10.95/tests/regression/apparmor/prologue.inc:
line 219: 748 Segmentation fault $testexec "$@" > $outfile 2>&1
Error: transition failed. Test 'EXEC_STACK (3 stacked - sharedfile)' was
expected to 'pass'. Reason for failure 'killed by signal 11'
/tmp/testlibRpZj1Y/source/yakkety/apparmor-2.10.95/tests/regression/apparmor/prologue.inc:
line 219: 754 Segmentation fault $testexec "$@" > $outfile 2>&1
Error: transition failed. Test 'EXEC_STACK (3 stacked - okcon)' was expected
to 'pass'. Reason for failure 'killed by signal 11'
/tmp/testlibRpZj1Y/source/yakkety/apparmor-2.10.95/tests/regression/apparmor/prologue.inc:
line 219: 833 Segmentation fault $testexec "$@" > $outfile 2>&1
Error: transition failed. Test 'EXEC_STACK (3 stacked - old AA WARN)' was
expected to 'pass'. Reason for failure 'killed by signal 11'
The previous command should result in no output and return value of 0
once the regression test is properly updated.
[Regression Potential]
* This is an extremely low risk change since it only touches
regression testing code that is not user-facing.
[Other]
* Fixed in upstream lp:apparmor tree:
https://bazaar.launchpad.net/~apparmor-
dev/apparmor/master/revision/3509
To manage notifications about this bug go to:
https://bugs.launchpad.net/apparmor/+bug/1628745/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp
