All autopkgtests for the newly accepted linux-signed (4.15.0-66.75) for bionic have finished running. The following regressions have been reported in tests triggered by the package:
zfs-linux/unknown (armhf) Please visit the excuses page listed below and investigate the failures, proceeding afterwards as per the StableReleaseUpdates policy regarding autopkgtest regressions [1]. https://people.canonical.com/~ubuntu-archive/proposed- migration/bionic/update_excuses.html#linux-signed [1] https://wiki.ubuntu.com/StableReleaseUpdates#Autopkgtest_Regressions Thank you! -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux-signed in Ubuntu. https://bugs.launchpad.net/bugs/1843327 Title: vmlinuz is world-readable Status in linux-signed package in Ubuntu: Fix Released Status in linux-signed source package in Bionic: Fix Committed Status in linux-signed source package in Disco: Fix Committed Bug description: [Impact] ppc64el vmlinuz is world-readable, possibly impacting security on that platform. [Test case] Verify vmlinuz is not world-readable after the fix. [Regression potential] File permissions may be wrong, possibly allowing attack. -------------------------------------------------------------------------- ====================================================================== FAIL: test_096_boot_symbols_unreadable (__main__.KernelSecurityTest) kernel addresses in /boot are not world readable ---------------------------------------------------------------------- Traceback (most recent call last): File "./test-kernel-security.py", line 1438, in test_096_boot_symbols_unreadable self.assertEqual(os.stat(name).st_mode & mask, expected, '%s is world readable' % (name)) AssertionError: /boot/vmlinux-4.15.0-62-generic is world readable ---------------------------------------------------------------------- Ran 125 tests in 31.183s FAILED (failures=1) This currently affects ppc64el. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux-signed/+bug/1843327/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp