Thanks for the report. Given that the kernel version is larger than 4.4.0-48, it should be skipping the line that resets the expected value to 0; it looks like the version comparison is falling back to the string version when handling the abi portion of the version (likely due to python-apt not being installed), and because of *that*, it's treating the ABI version of 1000+ as less than 48.
Realistically, the change in the setting as described in bug 1636461 should have made it out to all of the 4.4 kernels we ship, so I've gone ahead and removed that exception path from the test, committed in https://git.launchpad.net/qa-regression-testing/commit/?id=d67eca192876d31892d50ecd410a2b658a8d871a . Closing, please re-open if that doesn't address the issue. ** Changed in: linux (Ubuntu) Status: Incomplete => Invalid ** Changed in: qa-regression-testing Status: New => Fix Released -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1672344 Title: 4.4.0-1008.17 - aws failed with kernel security test 152 Status in QA Regression Testing: Fix Released Status in linux package in Ubuntu: Invalid Bug description: test_152_sysctl_disables_apparmor_unpriv_userns failed on 4.4.0-1008.17 - aws This issue can't be found on 4.4.0-67.88 generic kernel for aws. There was once a similar bug for this, please refer to bug 1636461 As the kernel version here is bigger than '4.4.0-46', the expected return value is 0, but the test returned 1 instead. FAIL: test_152_sysctl_disables_apparmor_unpriv_userns (__main__.KernelSecurityTest) unprivileged_userns_apparmor_policy sysctl supported ---------------------------------------------------------------------- Traceback (most recent call last): File "./test-kernel-security.py", line 1925, in test_152_sysctl_disables_apparmor_unpriv_userns self._test_sysctl_value('kernel/unprivileged_userns_apparmor_policy', expected, exists=exists) File "/home/ubuntu/autotest/client/tmp/ubuntu_qrt_kernel_security/src/qa-regression-testing/scripts/testlib.py", line 1182, in _test_sysctl_value self.assertEqual(value, expected, report) AssertionError: /proc/sys/kernel/unprivileged_userns_apparmor_policy is not 0: 1 To manage notifications about this bug go to: https://bugs.launchpad.net/qa-regression-testing/+bug/1672344/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
