so some potential low level interfaces you can try probing for more info. /sys/module/apparmor/parameters/enabled
with the aa-status reporting apparmor module is loaded. I expect you have access to this directory. Which means you can also check /sys/module/apparmor/parameters/mode to verify the mode apparmor is in. In addition you still might be able to get access to /sys/kernel/security/lsm which would indicate that securityfs is available in the container. You could then check /sys/kernel/security/apparmor/ which would indicate the apparmorfs interface is available in the container. If that is available you can try /sys/kernel/security/apparmor/policy/profiles/ -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1991141 Title: parser fails to unload profile via "aa-disable" on autopkgtest.u.c (armhf) - "Permission denied" Status in apparmor package in Ubuntu: New Status in django-auth-ldap package in Ubuntu: New Status in volatildap package in Ubuntu: New Bug description: This bug affects django-auth-ldap and other packages that call "aa- disable" in a dep8 test. For some reason that I wasn't able to determine, the command fails when it's executed on autopkgtest.ubuntu.com, but only when run on armhf. The error looks like this: ERROR: /sbin/apparmor_parser: Unable to remove "/usr/sbin/slapd". Permission denied; attempted to load a profile while confined? Disabling /usr/sbin/slapd. https://autopkgtest.ubuntu.com/results/autopkgtest- kinetic/kinetic/armhf/d/django-auth-ldap/20220927_015039_0a1ae@/log.gz I wasn't able to reproduce the problem. I believe it's something specific to how autopkgtest.u.c launches the armhf containers. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1991141/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
