This bug was fixed in the package apparmor - 2.10.95-4ubuntu5
---------------
apparmor (2.10.95-4ubuntu5) yakkety; urgency=medium
* debian/lib/apparmor/functions, debian/apparmor.init,
debian/apparmor.service, debian/apparmor.upstart,
debian/lib/apparmor/profile-load: Adjust the checks that previously kept
AppArmor policy from being loaded while booting a container. Now we
attempt to load policy if we're in a LXD or LXC managed container that is
using profile stacking inside of a policy namespace. (LP: #1628285)
* Fix regression tests so that the kernel SRU process is not interrupted by
failing tests
- debian/patches/r3505-tests-fix-stacking-mode-checks.patch: Fix the
stackonexec.sh and stackprofile.sh tests (LP: #1628295)
- debian/patches/r3509-tests-fix-exec_stack-errors.patch: Fix the
exec_stack.sh test (LP: #1628745)
-- Tyler Hicks <tyhi...@canonical.com> Thu, 29 Sep 2016 00:38:47 -0500
** Changed in: apparmor (Ubuntu)
Status: In Progress => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1628745
Title:
Change in kernel exec transition behavior causes regression tests to
fail
Status in AppArmor:
Fix Committed
Status in apparmor package in Ubuntu:
Fix Released
Bug description:
[Impact]
* The exec_stack.sh regression test fails due to a behavior change in
4.8 kernels from this patch:
commit 9f834ec18defc369d73ccf9e87a2790bfa05bf46
Author: Linus Torvalds <torva...@linux-foundation.org>
Date: Mon Aug 22 16:41:46 2016 -0700
binfmt_elf: switch to new creds when switching to new mm
* Adjusting the regression tests appropriately allows the kernel and
security teams to use QRT's test-apparmor.py to test kernel and
userspace AppArmor changes with confidence
[Test Case]
$ apt-get source apparmor
$ cd tests/regression/apparmor
$ make USE_SYSTEM=1
$ sudo bash exec_stack.sh
running exec_stack
/tmp/testlibRpZj1Y/source/yakkety/apparmor-2.10.95/tests/regression/apparmor/prologue.inc:
line 219: 608 Segmentation fault $testexec "$@" > $outfile 2>&1
Error: transition failed. Test 'EXEC_STACK (2 stacked - file)' was expected
to 'fail'. Reason for failure expect errno 13 != 139
/tmp/testlibRpZj1Y/source/yakkety/apparmor-2.10.95/tests/regression/apparmor/prologue.inc:
line 219: 610 Segmentation fault $testexec "$@" > $outfile 2>&1
Error: transition failed. Test 'EXEC_STACK (2 stacked - otherfile)' was
expected to 'fail'. Reason for failure expect errno 13 != 139
/tmp/testlibRpZj1Y/source/yakkety/apparmor-2.10.95/tests/regression/apparmor/prologue.inc:
line 219: 612 Segmentation fault $testexec "$@" > $outfile 2>&1
Error: transition failed. Test 'EXEC_STACK (2 stacked - thirdfile)' was
expected to 'fail'. Reason for failure expect errno 13 != 139
/tmp/testlibRpZj1Y/source/yakkety/apparmor-2.10.95/tests/regression/apparmor/prologue.inc:
line 219: 613 Segmentation fault $testexec "$@" > $outfile 2>&1
Error: transition failed. Test 'EXEC_STACK (2 stacked - sharedfile)' was
expected to 'pass'. Reason for failure 'killed by signal 11'
/tmp/testlibRpZj1Y/source/yakkety/apparmor-2.10.95/tests/regression/apparmor/prologue.inc:
line 219: 620 Segmentation fault $testexec "$@" > $outfile 2>&1
Error: transition failed. Test 'EXEC_STACK (2 stacked - okcon)' was expected
to 'pass'. Reason for failure 'killed by signal 11'
/tmp/testlibRpZj1Y/source/yakkety/apparmor-2.10.95/tests/regression/apparmor/prologue.inc:
line 219: 628 Segmentation fault $testexec "$@" > $outfile 2>&1
Error: transition failed. Test 'EXEC_STACK (2 stacked - bad label)' was
expected to 'fail'. Reason for failure 'killed by signal 11'
/tmp/testlibRpZj1Y/source/yakkety/apparmor-2.10.95/tests/regression/apparmor/prologue.inc:
line 219: 634 Segmentation fault $testexec "$@" > $outfile 2>&1
Error: transition failed. Test 'EXEC_STACK (2 stacked - bad mode)' was
expected to 'fail'. Reason for failure 'killed by signal 11'
/tmp/testlibRpZj1Y/source/yakkety/apparmor-2.10.95/tests/regression/apparmor/prologue.inc:
line 219: 741 Segmentation fault $testexec "$@" > $outfile 2>&1
Error: transition failed. Test 'EXEC_STACK (3 stacked - file)' was expected
to 'fail'. Reason for failure expect errno 13 != 139
/tmp/testlibRpZj1Y/source/yakkety/apparmor-2.10.95/tests/regression/apparmor/prologue.inc:
line 219: 745 Segmentation fault $testexec "$@" > $outfile 2>&1
Error: transition failed. Test 'EXEC_STACK (3 stacked - otherfile)' was
expected to 'fail'. Reason for failure expect errno 13 != 139
/tmp/testlibRpZj1Y/source/yakkety/apparmor-2.10.95/tests/regression/apparmor/prologue.inc:
line 219: 747 Segmentation fault $testexec "$@" > $outfile 2>&1
Error: transition failed. Test 'EXEC_STACK (3 stacked - thirdfile)' was
expected to 'fail'. Reason for failure expect errno 13 != 139
/tmp/testlibRpZj1Y/source/yakkety/apparmor-2.10.95/tests/regression/apparmor/prologue.inc:
line 219: 748 Segmentation fault $testexec "$@" > $outfile 2>&1
Error: transition failed. Test 'EXEC_STACK (3 stacked - sharedfile)' was
expected to 'pass'. Reason for failure 'killed by signal 11'
/tmp/testlibRpZj1Y/source/yakkety/apparmor-2.10.95/tests/regression/apparmor/prologue.inc:
line 219: 754 Segmentation fault $testexec "$@" > $outfile 2>&1
Error: transition failed. Test 'EXEC_STACK (3 stacked - okcon)' was expected
to 'pass'. Reason for failure 'killed by signal 11'
/tmp/testlibRpZj1Y/source/yakkety/apparmor-2.10.95/tests/regression/apparmor/prologue.inc:
line 219: 833 Segmentation fault $testexec "$@" > $outfile 2>&1
Error: transition failed. Test 'EXEC_STACK (3 stacked - old AA WARN)' was
expected to 'pass'. Reason for failure 'killed by signal 11'
The previous command should result in no output and return value of 0
once the regression test is properly updated.
[Regression Potential]
* This is an extremely low risk change since it only touches
regression testing code that is not user-facing.
[Other]
* Fixed in upstream lp:apparmor tree:
https://bazaar.launchpad.net/~apparmor-
dev/apparmor/master/revision/3509
To manage notifications about this bug go to:
https://bugs.launchpad.net/apparmor/+bug/1628745/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp
