This bug is awaiting verification that the linux-raspi/6.5.0-1014.17
kernel in -proposed solves the problem. Please test the kernel and
update this bug with the results. If the problem is solved, change the
tag 'verification-needed-mantic-linux-raspi' to 'verification-done-
mantic-linux-raspi'. If the problem still exists, change the tag
'verification-needed-mantic-linux-raspi' to 'verification-failed-mantic-
linux-raspi'.


If verification is not done by 5 working days from today, this fix will
be dropped from the source code, and this bug will be closed.


See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how
to enable and use -proposed. Thank you!


** Tags added: kernel-spammed-mantic-linux-raspi-v2 
verification-needed-mantic-linux-raspi

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2052662

Title:
  move_mount mediation does not detect if source is detached

Status in linux package in Ubuntu:
  Invalid
Status in linux source package in Mantic:
  Fix Released

Bug description:
  Impact:

  In AppArmor mediation, detached mounts are appearing as / when
  applying mount mediation, which is incorrect and leads to bad
  AppArmor policy being generated.

  In addition, the move_mount mediation is not being advertised to
  userspace, which denies the applications the possibility to
  respond accordingly.

  Fix:

  Fixed upstream by commit 8026e40608b4d552216d2a818ca7080a4264bb44
  by preventing move_mont from applying the attach_disconnected
  flag.

  
  Testcase:

  Check if move_mount file is available in securityfs:

  $ cat /sys/kernel/security/apparmor/features/mount/move_mount 
  detached

  Run upstream AppArmor mount tests, which include move_mount mediation.
  
https://gitlab.com/apparmor/apparmor/-/blob/master/tests/regression/apparmor/mount.sh

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2052662/+subscriptions


-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to