Public bug reported:
$ lsb_release -rd
Description: Ubuntu 26.04.1 LTS
Release: 26.04
$ apt-cache policy passt
passt:
Installed: 0.0~git20260120.386b5f5-1
Candidate: 0.0~git20260120.386b5f5-1
Version table:
*** 0.0~git20260120.386b5f5-1 500
500 http://es.archive.ubuntu.com/ubuntu resolute/universe amd64 Packages
100 /var/lib/dpkg/status
No inclusion of local overrides at the end of /etc/apparmor.d/usr.bin.passt (no
mention of "local" in the file at all):
$ tail /etc/apparmor.d/usr.bin.passt
# users, starting passt unconfined as well, which means that passt runs under
# its own stand-alone profile (this one), which implies in turn that execve()
# of /usr/bin/passt is not allowed, and socket and PID files can't be written.
#
# Duplicate libvirt-specific rules here as long as this is not solved in
# libvirt's profile itself.
/usr/bin/passt r,
owner @{run}/user/[0-9]*/libvirt/qemu/run/passt/* rw,
owner @{run}/libvirt/qemu/passt/* rw,
}
Expected to have a line for inclusion (or conditional inclusion) of local
overrides near the end of the file, such as:
# Site-specific additions and overrides. See local/README for details.
include <local/usr.bin.passt>
}
Note: I'll suggest an override in a separate bug report as soon as I've
something decent.
** Affects: passt (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2165739
Title:
passt apparmor profile lacks inclusion of local overrides
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/passt/+bug/2165739/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
