** Description changed: [impact] test case failure [test case] check autopkgtest logs, e.g. https://objectstorage.prodstack4-5.canonical.com/v1/AUTH_77e2ada1e7a84929a74ba3b87153c0ac/autopkgtest-bionic/bionic/arm64/s/systemd/20200401_091111_34f60@/log.gz /* test_restrict_suid_sgid */ Failed to add suid/sgid rule for architecture arm64, skipping: Numerical argument out of domain Assertion 'chmod(path, 0775 | S_ISUID) < 0 && errno == EPERM' failed at ../src/test/test-seccomp.c:823, function test_restrict_suid_sgid(). Aborting. suidsgidseccomp terminated by signal ABRT. Assertion 'wait_for_terminate_and_check("suidsgidseccomp", pid, WAIT_LOG) == EXIT_SUCCESS' failed at ../src/test/test-seccomp.c:889, function test_restrict_suid_sgid(). Aborting. FAIL: test-seccomp (code: 134) Aborted (core dumped) [regression potential] - TBD + this improves the function that (tries to) install seccomp suid/sgid + filters, so and regression would involve failure to restrict suid/sgid + with seccomp filters; however on arm64, the this functionality already + fails 100% of the time (which is what the failed test case was pointing + out). [scope] this appears to fail only in Bionic, and this specific testcase was backported in patch CVE-2019-384x-2.patch. It does not appear that it ever passed in Bionic on arm64. [other info] systemd bionic arm64 autopkgtests have failed forever, but we should fix that.
** Description changed: [impact] - test case failure + RestrictSUIDSGID (backported to Bionic in security CVE) fails 100% of + the time on arm64, and testcase failure indicates this as well. [test case] check autopkgtest logs, e.g. https://objectstorage.prodstack4-5.canonical.com/v1/AUTH_77e2ada1e7a84929a74ba3b87153c0ac/autopkgtest-bionic/bionic/arm64/s/systemd/20200401_091111_34f60@/log.gz /* test_restrict_suid_sgid */ Failed to add suid/sgid rule for architecture arm64, skipping: Numerical argument out of domain Assertion 'chmod(path, 0775 | S_ISUID) < 0 && errno == EPERM' failed at ../src/test/test-seccomp.c:823, function test_restrict_suid_sgid(). Aborting. suidsgidseccomp terminated by signal ABRT. Assertion 'wait_for_terminate_and_check("suidsgidseccomp", pid, WAIT_LOG) == EXIT_SUCCESS' failed at ../src/test/test-seccomp.c:889, function test_restrict_suid_sgid(). Aborting. FAIL: test-seccomp (code: 134) Aborted (core dumped) [regression potential] this improves the function that (tries to) install seccomp suid/sgid filters, so and regression would involve failure to restrict suid/sgid with seccomp filters; however on arm64, the this functionality already fails 100% of the time (which is what the failed test case was pointing out). [scope] - this appears to fail only in Bionic, and this specific testcase was - backported in patch CVE-2019-384x-2.patch. It does not appear that it - ever passed in Bionic on arm64. + this fails only in Bionic, and this specific feature and testcase was + backported in patches for CVE-2019-384x. It does not appear that the + backported feature, or its testcase, ever passed in Bionic on arm64. [other info] systemd bionic arm64 autopkgtests have failed forever, but we should fix that. ** Changed in: systemd (Ubuntu Bionic) Importance: Low => Medium -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to systemd in Ubuntu. https://bugs.launchpad.net/bugs/1870589 Title: test-seccomp fails test_restrict_suid_sgid on arm64 on Bionic Status in systemd package in Ubuntu: Fix Released Status in systemd source package in Bionic: In Progress Bug description: [impact] RestrictSUIDSGID (backported to Bionic in security CVE) fails 100% of the time on arm64, and testcase failure indicates this as well. [test case] check autopkgtest logs, e.g. https://objectstorage.prodstack4-5.canonical.com/v1/AUTH_77e2ada1e7a84929a74ba3b87153c0ac/autopkgtest-bionic/bionic/arm64/s/systemd/20200401_091111_34f60@/log.gz /* test_restrict_suid_sgid */ Failed to add suid/sgid rule for architecture arm64, skipping: Numerical argument out of domain Assertion 'chmod(path, 0775 | S_ISUID) < 0 && errno == EPERM' failed at ../src/test/test-seccomp.c:823, function test_restrict_suid_sgid(). Aborting. suidsgidseccomp terminated by signal ABRT. Assertion 'wait_for_terminate_and_check("suidsgidseccomp", pid, WAIT_LOG) == EXIT_SUCCESS' failed at ../src/test/test-seccomp.c:889, function test_restrict_suid_sgid(). Aborting. FAIL: test-seccomp (code: 134) Aborted (core dumped) [regression potential] this improves the function that (tries to) install seccomp suid/sgid filters, so and regression would involve failure to restrict suid/sgid with seccomp filters; however on arm64, the this functionality already fails 100% of the time (which is what the failed test case was pointing out). [scope] this fails only in Bionic, and this specific feature and testcase was backported in patches for CVE-2019-384x. It does not appear that the backported feature, or its testcase, ever passed in Bionic on arm64. [other info] systemd bionic arm64 autopkgtests have failed forever, but we should fix that. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1870589/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
