** Tags removed: verification-needed-xenial
** Tags added: verification-done-xenial

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1615881

Title:
  The label build for onexec when stacking is wrong

Status in AppArmor:
  New
Status in linux package in Ubuntu:
  Incomplete
Status in linux source package in Xenial:
  Fix Committed
Status in linux source package in Yakkety:
  Incomplete

Bug description:
  The label build for onexec when crossing a namespace boundry is not           
  
  quite correct. The label needs to be built per profile and not based          
  
  on the whole label because the onexec transition only applies to              
  
  profiles within the ns. Where merging against the label could include         
  
  profile that are transitioned via the profile_transition callback             
  
  and should not be in the final label.

To manage notifications about this bug go to:
https://bugs.launchpad.net/apparmor/+bug/1615881/+subscriptions

-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to