interfaces/apparmor: compensate for kernel behavior change #2936

Merged
merged 2 commits into from Feb 27, 2017

Conversation

Projects
None yet
2 participants
Contributor

zyga commented Feb 24, 2017

During the end of the zesty development cycle the kernel was changed (as
a bugfix to apparmor bug related to locking files) and now there are
denials when accessing libc.

Jamie Strandboge suggested to add a rule to allow this and John Johansen
confirmed that it should be used by default as the relevant kernel
bugfix is valid and must stay as-is.

Fixes: https://bugs.launchpad.net/snapd/+bug/1666897
Signed-off-by: Zygmunt Krynicki zygmunt.krynicki@canonical.com

interfaces/apparmor: compensate for kernel behavior change
During the end of the zesty development cycle the kernel was changed (as
a bugfix to apparmor bug related to locking files) and now there are
denials when accessing libc.

Jamie Strandboge suggested to add a rule to allow this and John Johansen
confirmed that it should be used by default as the relevant kernel
bugfix is valid and must stay as-is.

Fixes: https://bugs.launchpad.net/snapd/+bug/1666897
Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@canonical.com>

@zyga zyga merged commit f623636 into snapcore:master Feb 27, 2017

3 of 6 checks passed

xenial-amd64 autopkgtest finished (failure)
Details
xenial-i386 autopkgtest running
Details
xenial-ppc64el autopkgtest running
Details
continuous-integration/travis-ci/pr The Travis CI build passed
Details
yakkety-amd64 autopkgtest finished (success)
Details
zesty-amd64 autopkgtest finished (success)
Details

@zyga zyga deleted the zyga:new-apparmor-rule-for-kernel-change branch Feb 27, 2017

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment