[Touch-packages] [Bug 2061825] Re: [SRU] ucf fails to work for local diversions on Jammy

2024-04-24 Thread Ponnuvel Palaniyappan
Thanks, Heitor. I'll remember to run `update-maintainer` going forward!

Re. Focal: The syntax error and relevant code was introduced in 3.0040
whereas Focal is using older ucf. Thus Focal is unaffected. Likewise
Lunar/Mantic/Noble have the fixed version already. So this is a Jammy-
only backport.

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ucf in Ubuntu.
https://bugs.launchpad.net/bugs/2061825

Title:
  [SRU] ucf fails to work for local diversions on Jammy

Status in ucf package in Ubuntu:
  Fix Released
Status in ucf source package in Jammy:
  In Progress

Bug description:
  [ Impact ]

  When a dpkg-diversion is used to setup a package diversion and ucf for 
managing
  the configuration files for chrony package, the postinst script of ucf fails
  when installing chrony.

  This issue isn't specific to chrony but can happen for any package whose
  config files are managed by ucf.

  This affects users on Jammy who use ucf. Newer versions of ucf have this bug
  fixed already.

  [ Test Plan ]

  1. Create a Jammy container or VM
  2. Setup a diversion for chrony.conf: dpkg-divert --package chrony --add 
--rename --divert /etc/chrony/chrony.conf.custom /etc/chrony/chrony.conf
  3. Install chrony: apt install chrony -y
  4. Notice the postinst script fail with syntax errors such as:
  ```
  Preparing to unpack .../chrony_4.2-2ubuntu2_amd64.deb ...
  Unpacking chrony (4.2-2ubuntu2) ...
  Setting up chrony (4.2-2ubuntu2) ...
  /usr/bin/ucf: 444: [: missing ]
  grep: ]: No such file or directory
  /usr/bin/ucf: 444: [: missing ]
  grep: ]: No such file or directory
  ```
  5. Install the package with the fix from the PPA: 
https://launchpad.net/~pponnuvel/+archive/ubuntu/ucf-jammy (to be replaced with 
the package from the -proposed pocket)
  6. Repeat the same from steps 1 to 4 and notice no failures at step4.

  [ Where problems could occur ]

  Can further introduce similar bugs if the patch contains similar syntax
  errors. Consequently local diversion may not take effect for packages
  using ucf to manage configuration files.

  [ Other Info ]
   
  Upstream bug: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=979354

  It's been fixed in version ucf/3.0043+nmu1. Lunar/Mantic/Noble all have the
  ucf version with this patch.

  Affects Jammy only and thus backported to only Jammy.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ucf/+bug/2061825/+subscriptions


-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 2061825] Re: [SRU] ucf fails to work for local diversions on Jammy

2024-04-24 Thread Ponnuvel Palaniyappan
Thanks, Dariusz!

I've attached a new debdiff.

** Attachment added: "debdiff_2061825_new.txt"
   
https://bugs.launchpad.net/ubuntu/+source/ucf/+bug/2061825/+attachment/5770060/+files/debdiff_2061825_new.txt

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ucf in Ubuntu.
https://bugs.launchpad.net/bugs/2061825

Title:
  [SRU] ucf fails to work for local diversions on Jammy

Status in ucf package in Ubuntu:
  Fix Released
Status in ucf source package in Jammy:
  In Progress

Bug description:
  [ Impact ]

  When a dpkg-diversion is used to setup a package diversion and ucf for 
managing
  the configuration files for chrony package, the postinst script of ucf fails
  when installing chrony.

  This issue isn't specific to chrony but can happen for any package whose
  config files are managed by ucf.

  This affects users on Jammy who use ucf. Newer versions of ucf have this bug
  fixed already.

  [ Test Plan ]

  1. Create a Jammy container or VM
  2. Setup a diversion for chrony.conf: dpkg-divert --package chrony --add 
--rename --divert /etc/chrony/chrony.conf.custom /etc/chrony/chrony.conf
  3. Install chrony: apt install chrony -y
  4. Notice the postinst script fail with syntax errors such as:
  ```
  Preparing to unpack .../chrony_4.2-2ubuntu2_amd64.deb ...
  Unpacking chrony (4.2-2ubuntu2) ...
  Setting up chrony (4.2-2ubuntu2) ...
  /usr/bin/ucf: 444: [: missing ]
  grep: ]: No such file or directory
  /usr/bin/ucf: 444: [: missing ]
  grep: ]: No such file or directory
  ```
  5. Install the package with the fix from the PPA: 
https://launchpad.net/~pponnuvel/+archive/ubuntu/ucf-jammy (to be replaced with 
the package from the -proposed pocket)
  6. Repeat the same from steps 1 to 4 and notice no failures at step4.

  [ Where problems could occur ]

  Can further introduce similar bugs if the patch contains similar syntax
  errors. Consequently local diversion may not take effect for packages
  using ucf to manage configuration files.

  [ Other Info ]
   
  Upstream bug: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=979354

  It's been fixed in version ucf/3.0043+nmu1. Lunar/Mantic/Noble all have the
  ucf version with this patch.

  Affects Jammy only and thus backported to only Jammy.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ucf/+bug/2061825/+subscriptions


-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 2061825] Re: [SRU] ucf fails to work for local diversions on Jammy

2024-04-18 Thread Ponnuvel Palaniyappan
Attaching the debdiff.

** Attachment added: "debdiff.txt"
   
https://bugs.launchpad.net/ubuntu/+source/ucf/+bug/2061825/+attachment/5767388/+files/debdiff.txt

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ucf in Ubuntu.
https://bugs.launchpad.net/bugs/2061825

Title:
  [SRU] ucf fails to work for local diversions on Jammy

Status in ucf package in Ubuntu:
  Fix Released
Status in ucf source package in Jammy:
  In Progress

Bug description:
  [ Impact ]

  When a dpkg-diversion is used to setup a package diversion and ucf for 
managing
  the configuration files for chrony package, the postinst script of ucf fails
  when installing chrony.

  This issue isn't specific to chrony but can happen for any package whose
  config files are managed by ucf.

  This affects users on Jammy who use ucf. Newer versions of ucf have this bug
  fixed already.

  [ Test Plan ]

  1. Create a Jammy container or VM
  2. Setup a diversion for chrony.conf: dpkg-divert --package chrony --add 
--rename --divert /etc/chrony/chrony.conf.custom /etc/chrony/chrony.conf
  3. Install chrony: apt install chrony -y
  4. Notice the postinst script fail with syntax errors such as:
  ```
  Preparing to unpack .../chrony_4.2-2ubuntu2_amd64.deb ...
  Unpacking chrony (4.2-2ubuntu2) ...
  Setting up chrony (4.2-2ubuntu2) ...
  /usr/bin/ucf: 444: [: missing ]
  grep: ]: No such file or directory
  /usr/bin/ucf: 444: [: missing ]
  grep: ]: No such file or directory
  ```
  5. Install the package with the fix from the PPA: 
https://launchpad.net/~pponnuvel/+archive/ubuntu/ucf-jammy (to be replaced with 
the package from the -proposed pocket)
  6. Repeat the same from steps 1 to 4 and notice no failures at step4.

  [ Where problems could occur ]

  Can further introduce similar bugs if the patch contains similar syntax
  errors. Consequently local diversion may not take effect for packages
  using ucf to manage configuration files.

  [ Other Info ]
   
  Upstream bug: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=979354

  It's been fixed in version ucf/3.0043+nmu1. Lunar/Mantic/Noble all have the
  ucf version with this patch.

  Affects Jammy only and thus backported to only Jammy.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ucf/+bug/2061825/+subscriptions


-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 2061825] Re: [SRU] ucf fails to work for local diversions on Jammy

2024-04-17 Thread Ponnuvel Palaniyappan
** Tags added: sts

** Description changed:

- ucf doesn't work correctly when local diversions in place.
+ [ Impact ]
  
- This is due to a syntax error and has been fixed in Debian upstream:
+ When a dpkg-diversion is used to setup a package diversion and ucf for 
managing
+ the configuration files for chrony package, the postinst script of ucf fails
+ when installing chrony.
  
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=979354
+ This issue isn't specific to chrony but can happen for any package whose
+ config files are managed by ucf.
  
- Mantic and Noble have the fixed version already. This bug doesn't exist
- Focal.
+ This affects users on Jammy who use ucf. Newer versions of ucf have this bug
+ fixed already.
  
+ [ Test Plan ]
  
- This will be a Jammy-only backport.
+ 1. Create a Jammy container or VM
+ 2. Setup a diversion for chrony.conf: dpkg-divert --package chrony --add 
--rename --divert /etc/chrony/chrony.conf.custom /etc/chrony/chrony.conf
+ 3. Install chrony: apt install chrony -y
+ 4. Notice the postinst script fail with syntax errors such as:
+ ```
+ Preparing to unpack .../chrony_4.2-2ubuntu2_amd64.deb ...
+ Unpacking chrony (4.2-2ubuntu2) ...
+ Setting up chrony (4.2-2ubuntu2) ...
+ /usr/bin/ucf: 444: [: missing ]
+ grep: ]: No such file or directory
+ /usr/bin/ucf: 444: [: missing ]
+ grep: ]: No such file or directory
+ ```
+ 5. Install the package with the fix from the PPA: 
https://launchpad.net/~pponnuvel/+archive/ubuntu/ucf-jammy (to be replaced with 
the package from the -proposed pocket)
+ 6. Repeat the same from steps 1 to 4 and notice no failures at step4.
+ 
+ [ Where problems could occur ]
+ 
+ Can further introduce similar bugs if the patch contains similar syntax
+ errors. Consequently local diversion may not take effect for packages
+ using ucf to manage configuration files.
+ 
+ [ Other Info ]
+  
+ Upstream bug: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=979354
+ 
+ It's been fixed in version ucf/3.0043+nmu1. Lunar/Mantic/Noble all have the
+ ucf version with this patch.
+ 
+ Affects Jammy only and thus backported to only Jammy.

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ucf in Ubuntu.
https://bugs.launchpad.net/bugs/2061825

Title:
  [SRU] ucf fails to work for local diversions on Jammy

Status in ucf package in Ubuntu:
  Fix Released
Status in ucf source package in Jammy:
  In Progress

Bug description:
  [ Impact ]

  When a dpkg-diversion is used to setup a package diversion and ucf for 
managing
  the configuration files for chrony package, the postinst script of ucf fails
  when installing chrony.

  This issue isn't specific to chrony but can happen for any package whose
  config files are managed by ucf.

  This affects users on Jammy who use ucf. Newer versions of ucf have this bug
  fixed already.

  [ Test Plan ]

  1. Create a Jammy container or VM
  2. Setup a diversion for chrony.conf: dpkg-divert --package chrony --add 
--rename --divert /etc/chrony/chrony.conf.custom /etc/chrony/chrony.conf
  3. Install chrony: apt install chrony -y
  4. Notice the postinst script fail with syntax errors such as:
  ```
  Preparing to unpack .../chrony_4.2-2ubuntu2_amd64.deb ...
  Unpacking chrony (4.2-2ubuntu2) ...
  Setting up chrony (4.2-2ubuntu2) ...
  /usr/bin/ucf: 444: [: missing ]
  grep: ]: No such file or directory
  /usr/bin/ucf: 444: [: missing ]
  grep: ]: No such file or directory
  ```
  5. Install the package with the fix from the PPA: 
https://launchpad.net/~pponnuvel/+archive/ubuntu/ucf-jammy (to be replaced with 
the package from the -proposed pocket)
  6. Repeat the same from steps 1 to 4 and notice no failures at step4.

  [ Where problems could occur ]

  Can further introduce similar bugs if the patch contains similar syntax
  errors. Consequently local diversion may not take effect for packages
  using ucf to manage configuration files.

  [ Other Info ]
   
  Upstream bug: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=979354

  It's been fixed in version ucf/3.0043+nmu1. Lunar/Mantic/Noble all have the
  ucf version with this patch.

  Affects Jammy only and thus backported to only Jammy.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ucf/+bug/2061825/+subscriptions


-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 2061825] Re: [SRU] ucf fails to work for local diversions on Jammy

2024-04-17 Thread Ponnuvel Palaniyappan
** Summary changed:

- ucf fails to work for local diversions on Jammy
+ [SRU] ucf fails to work for local diversions on Jammy

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ucf in Ubuntu.
https://bugs.launchpad.net/bugs/2061825

Title:
  [SRU] ucf fails to work for local diversions on Jammy

Status in ucf package in Ubuntu:
  Fix Released
Status in ucf source package in Jammy:
  In Progress

Bug description:
  ucf doesn't work correctly when local diversions in place.

  This is due to a syntax error and has been fixed in Debian upstream:

  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=979354

  Mantic and Noble have the fixed version already. This bug doesn't
  exist Focal.

  
  This will be a Jammy-only backport.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ucf/+bug/2061825/+subscriptions


-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 2061825] [NEW] ucf fails to work for local diversions on Jammy

2024-04-16 Thread Ponnuvel Palaniyappan
Public bug reported:

ucf doesn't work correctly when local diversions in place.

This is due to a syntax error and has been fixed in Debian upstream:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=979354

Mantic and Noble have the fixed version already. This bug doesn't exist
Focal.


This will be a Jammy-only backport.

** Affects: ucf (Ubuntu)
 Importance: Undecided
 Status: Fix Released

** Affects: ucf (Ubuntu Jammy)
 Importance: High
 Assignee: Ponnuvel Palaniyappan (pponnuvel)
 Status: In Progress

** Also affects: ucf (Ubuntu Jammy)
   Importance: Undecided
   Status: New

** Changed in: ucf (Ubuntu)
   Status: New => Fix Released

** Changed in: ucf (Ubuntu Jammy)
   Status: New => In Progress

** Changed in: ucf (Ubuntu Jammy)
 Assignee: (unassigned) => Ponnuvel Palaniyappan (pponnuvel)

** Changed in: ucf (Ubuntu Jammy)
   Importance: Undecided => High

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ucf in Ubuntu.
https://bugs.launchpad.net/bugs/2061825

Title:
  ucf fails to work for local diversions on Jammy

Status in ucf package in Ubuntu:
  Fix Released
Status in ucf source package in Jammy:
  In Progress

Bug description:
  ucf doesn't work correctly when local diversions in place.

  This is due to a syntax error and has been fixed in Debian upstream:

  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=979354

  Mantic and Noble have the fixed version already. This bug doesn't
  exist Focal.

  
  This will be a Jammy-only backport.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ucf/+bug/2061825/+subscriptions


-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 2060666] Re: Memory leak in krb5 version 1.17

2024-04-11 Thread Ponnuvel Palaniyappan
** Changed in: krb5 (Ubuntu Focal)
   Status: New => In Progress

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to krb5 in Ubuntu.
https://bugs.launchpad.net/bugs/2060666

Title:
  Memory leak in krb5 version 1.17

Status in krb5 package in Ubuntu:
  Fix Released
Status in krb5 source package in Focal:
  In Progress

Bug description:
  Commit 1cd2821 altered the memory
  management of krb5_gss_inquire_cred(), introducing defcred to act as
  an owner pointer when the function must acquire a default credential.
  The commit neglected to update the code to release the default cred
  along the successful path.  The old code does not trigger because
  cred_handle is now reassigned, so the default credential is leaked.

  The commit 
https://github.com/krb5/krb5/commit/098f874f3b50dd2c46c0a574677324b5f6f3a1a8 
fixes the leak.
  It's been part of newer krb5 releases (Jammy, and Noble have the releases 
with the fix). Bionic doesn't have the commit the introduced the memory leak.

  So this fix needs to be backported to Focal (only).

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/2060666/+subscriptions


-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 2060666] Re: Memory leak in krb5 version 1.17

2024-04-09 Thread Ponnuvel Palaniyappan
** Changed in: krb5 (Ubuntu Focal)
 Assignee: (unassigned) => Ponnuvel Palaniyappan (pponnuvel)

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to krb5 in Ubuntu.
https://bugs.launchpad.net/bugs/2060666

Title:
  Memory leak in krb5 version 1.17

Status in krb5 package in Ubuntu:
  New
Status in krb5 source package in Focal:
  New

Bug description:
  Commit 1cd2821 altered the memory
  management of krb5_gss_inquire_cred(), introducing defcred to act as
  an owner pointer when the function must acquire a default credential.
  The commit neglected to update the code to release the default cred
  along the successful path.  The old code does not trigger because
  cred_handle is now reassigned, so the default credential is leaked.

  The commit 
https://github.com/krb5/krb5/commit/098f874f3b50dd2c46c0a574677324b5f6f3a1a8 
fixes the leak.
  It's been part of newer krb5 releases (Jammy, and Noble have the releases 
with the fix). Bionic doesn't have the commit the introduced the memory leak.

  So this fix needs to be backported to Focal (only).

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/2060666/+subscriptions


-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 2060666] [NEW] Memory leak in krb5 version 1.17

2024-04-09 Thread Ponnuvel Palaniyappan
Public bug reported:

Commit 1cd2821 altered the memory
management of krb5_gss_inquire_cred(), introducing defcred to act as
an owner pointer when the function must acquire a default credential.
The commit neglected to update the code to release the default cred
along the successful path.  The old code does not trigger because
cred_handle is now reassigned, so the default credential is leaked.

The commit 
https://github.com/krb5/krb5/commit/098f874f3b50dd2c46c0a574677324b5f6f3a1a8 
fixes the leak.
It's been part of newer krb5 releases (Jammy, and Noble have the releases with 
the fix). Bionic doesn't have the commit the introduced the memory leak.

So this fix needs to be backported to Focal (only).

** Affects: krb5 (Ubuntu)
 Importance: Undecided
 Status: New

** Affects: krb5 (Ubuntu Focal)
 Importance: Undecided
 Assignee: Ponnuvel Palaniyappan (pponnuvel)
 Status: New


** Tags: sts

** Tags added: sts

** Also affects: krb5 (Ubuntu Focal)
   Importance: Undecided
   Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to krb5 in Ubuntu.
https://bugs.launchpad.net/bugs/2060666

Title:
  Memory leak in krb5 version 1.17

Status in krb5 package in Ubuntu:
  New
Status in krb5 source package in Focal:
  New

Bug description:
  Commit 1cd2821 altered the memory
  management of krb5_gss_inquire_cred(), introducing defcred to act as
  an owner pointer when the function must acquire a default credential.
  The commit neglected to update the code to release the default cred
  along the successful path.  The old code does not trigger because
  cred_handle is now reassigned, so the default credential is leaked.

  The commit 
https://github.com/krb5/krb5/commit/098f874f3b50dd2c46c0a574677324b5f6f3a1a8 
fixes the leak.
  It's been part of newer krb5 releases (Jammy, and Noble have the releases 
with the fix). Bionic doesn't have the commit the introduced the memory leak.

  So this fix needs to be backported to Focal (only).

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/2060666/+subscriptions


-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1992692] Re: tzdata 2022e release

2022-10-17 Thread Ponnuvel Palaniyappan
Is there a timeline to backport to Xenial?

A customer using Xenial/ESM is specifically interested in the patch to
fix the Jordan tz (which is using DLS all-year round going forward).

** Tags added: sts

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to tzdata in Ubuntu.
https://bugs.launchpad.net/bugs/1992692

Title:
  tzdata 2022e release

Status in tzdata package in Ubuntu:
  Fix Released
Status in tzdata source package in Bionic:
  New
Status in tzdata source package in Focal:
  New
Status in tzdata source package in Jammy:
  New

Bug description:
  New timezone data, with the following timezones impacted:
  - Palestine transitions are now Saturdays at 02:00. This means 2022 falls
    back 10-29 at 02:00, not 10-28 at 01:00.
  - Simplify three Ukraine zones into one.
  - Jordan and Syria switch from +02/+03 with DST to year-round +03.

  icu update to 2022e: https://unicode-
  org.atlassian.net/browse/ICU-22178

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/tzdata/+bug/1992692/+subscriptions


-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1988270] Re: AppArmor fails to start with Yoga UCA libvirt profile on Focal

2022-10-11 Thread Ponnuvel Palaniyappan
** Tags added: sts

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1988270

Title:
  AppArmor fails to start with Yoga UCA libvirt profile on Focal

Status in Ubuntu Cloud Archive:
  Confirmed
Status in apparmor package in Ubuntu:
  Invalid
Status in apparmor source package in Focal:
  New

Bug description:
  On a fully patched Ubuntu Focal with Yoga UCA enabled, after
  installation of libvirt-daemon-system, restarting apparmor would fail
  with error:

  Aug 31 07:40:52 ubuntu2004.localdomain apparmor.systemd[6335]: Restarting 
AppArmor
  Aug 31 07:40:52 ubuntu2004.localdomain apparmor.systemd[6335]: Reloading 
AppArmor profiles
  Aug 31 07:40:52 ubuntu2004.localdomain apparmor.systemd[6341]: Skipping 
profile in /etc/apparmor.d/disable: usr.sbin.rsyslogd
  Aug 31 07:40:52 ubuntu2004.localdomain apparmor.systemd[6348]: AppArmor 
parser error for /etc/apparmor.d in /etc/apparmor.d/usr.sbin.libvirtd at line 
29: Invalid capability bpf.
  Aug 31 07:40:52 ubuntu2004.localdomain apparmor.systemd[6413]: AppArmor 
parser error for /etc/apparmor.d/usr.sbin.libvirtd in 
/etc/apparmor.d/usr.sbin.libvirtd at line 29: Invalid capability bpf.
  Aug 31 07:40:52 ubuntu2004.localdomain apparmor.systemd[6418]: Skipping 
profile in /etc/apparmor.d/disable: usr.sbin.rsyslogd
  Aug 31 07:40:52 ubuntu2004.localdomain apparmor.systemd[6335]: Error: At 
least one profile failed to load
  Aug 31 07:40:52 ubuntu2004.localdomain systemd[1]: apparmor.service: Main 
process exited, code=exited, status=1/FAILURE
  Aug 31 07:40:52 ubuntu2004.localdomain systemd[1]: apparmor.service: Failed 
with result 'exit-code'.
  Aug 31 07:40:52 ubuntu2004.localdomain systemd[1]: Failed to start Load 
AppArmor profiles.

  In addition to bpf, perfmon capability, which is also enabled in
  /etc/apparmor.d/usr.sbin.libvirtd profile, would lead to the same
  error.

  System information:
  root@ubuntu2004:~# uname -a
  Linux ubuntu2004.localdomain 5.4.0-125-generic #141-Ubuntu SMP Wed Aug 10 
13:42:03 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux
  root@ubuntu2004:~# dpkg -l libvirt\*
  Desired=Unknown/Install/Remove/Purge/Hold
  | Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
  |/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
  ||/ Name   Version 
Architecture Description
  
+++-==-===--=
  ii  libvirt-clients8.0.0-1ubuntu7.1~cloud0 amd64  
  Programs for the libvirt library
  ii  libvirt-daemon 8.0.0-1ubuntu7.1~cloud0 amd64  
  Virtualization daemon
  ii  libvirt-daemon-config-network  8.0.0-1ubuntu7.1~cloud0 all
  Libvirt daemon configuration files (default network)
  ii  libvirt-daemon-config-nwfilter 8.0.0-1ubuntu7.1~cloud0 all
  Libvirt daemon configuration files (default network filters)
  un  libvirt-daemon-driver-lxc 
  (no description available)
  ii  libvirt-daemon-driver-qemu 8.0.0-1ubuntu7.1~cloud0 amd64  
  Virtualization daemon QEMU connection driver
  un  libvirt-daemon-driver-storage-gluster 
  (no description available)
  un  libvirt-daemon-driver-storage-iscsi-direct
  (no description available)
  un  libvirt-daemon-driver-storage-rbd 
  (no description available)
  un  libvirt-daemon-driver-storage-zfs 
  (no description available)
  un  libvirt-daemon-driver-vbox
  (no description available)
  un  libvirt-daemon-driver-xen 
  (no description available)
  ii  libvirt-daemon-system  8.0.0-1ubuntu7.1~cloud0 amd64  
  Libvirt daemon configuration files
  ii  libvirt-daemon-system-systemd  8.0.0-1ubuntu7.1~cloud0 all
  Libvirt daemon configuration files (systemd)
  un  libvirt-daemon-system-sysv
  (no description available)
  un  libvirt-login-shell   
  (no description available)
  un  libvirt-sanlock   
  (no description available)
  ii  libvirt0:amd64 8.0.0-1ubuntu7.1~cloud0 amd64  
  library for interfacing with different virtualization systems
  root@ubuntu2004:~# dpkg -l apparmor\*
  Desired=Unknown/Install/Remove/Purge/Hold
  | Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
  |/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
  ||/ NameVersion   Architecture