AppArmor

Advanced search

Ubuntu also tracks bugs for packages derived from this project: apparmor in Ubuntu.

1 → 75 of 370 results First • Previous • • Last
Critical
In Progress
#1379536 Coarse-grained kernel keyring mediation
AppArmor 10
Critical
In Progress
#1385419 support in-namespace stacking
AppArmor 8
Critical
Triaged
#1385421 support virtualized namespaced parameters/controls
AppArmor 6
Critical
Triaged
#1385422 incrementally improve handling of object disconnect
AppArmor 6
High
In Progress
#796588 Fine-grained network mediation
AppArmor 122
High
Triaged
#888077 alias rules being only partially applied
AppArmor 12
High
In Progress
#959560 deny mount does not work correctly
AppArmor 14
High
Confirmed
#1312527 AppArmor v3α6 triggers a kernel bug on CONFIG_PREEMPT=y
AppArmor 6
High
Triaged
#1381201 Upstream unix mediation
AppArmor 8
High
Triaged
#1381706 Support file delegation for confined processes
AppArmor 6
High
Triaged
#1381713 Support policy query interface for file
AppArmor 12
High
Triaged
#1381739 Track userspace dfa extension
AppArmor 6
High
In Progress
#1496430 Docker-1.8.2 can't create container, due to apparmor denying 'disconnected path'
AppArmor 8
High
Triaged
#1544389 Creating a new namespace results in an AppArmor WARN
AppArmor 6
High
Triaged
#1584165 a change_profile rule with an exec condition allows for a direct changeprofile operation
AppArmor 6
High
Triaged
#1598759 AppArmor nameservice abstraction doesn't allow communication with systemd-resolved
AppArmor 74
High
Triaged
#1620791 Use of empty path_cond in AppArmor kernel code can lead to unexpected permission check results
AppArmor 6
Medium
Triaged
#484786 Better support for btrfs snapshots
AppArmor 360
Medium
Triaged
#731175 aa-status does not correctly report all unconfined processes that have a profile defined
AppArmor 6
Medium
Triaged
#893232 Can not directly change_profile to the unconfined state of a child namespace
AppArmor 6
Medium
Triaged
#897924 Can't remove profile from namespace
AppArmor 6
Medium
Triaged
#921000 no logging if using non-existent child profile
AppArmor 6
Medium
Confirmed
#969299 Don't require use of mediate_deleted with LXC (was: apparmor prevents dpkg-divert and localedef from working in a container)
AppArmor 92
Medium
In Progress
#1014304 logprof assumes //null-xy belongs to the main profile
AppArmor 14
Medium
Confirmed
#1277711 parser: no option to specify configfile - breaks testcases
AppArmor 6
Medium
Triaged
#1306876 Apparmor parser fails w/cx rules and CRLF line endings
AppArmor 6
Medium
Triaged
#1306882 apparmor parser fails with ptrace rules and CRLF line endings
AppArmor 6
Medium
Triaged
#1317555 'signal peer=@{profile_name},' does not work as expected when in a profile using a regex match as a name
AppArmor 24
Medium
Triaged
#1328706 initscript fails if profile filename contains spaces
AppArmor 6
Medium
Triaged
#1332292 py tools: various regexes need support for quotes
AppArmor 6
Medium
Triaged
#1334455 apparmor fails loading policy with nested profiles inside hats
AppArmor 14
Medium
Confirmed
#1349433 AppArmor breaks seccomp @ Apache mpm-itk
AppArmor 18
Medium
New
#1366568 aa-easyprof installed without x permissions
AppArmor 6
Medium
Fix Committed
#1377338 apparmor may fail to load some profiles if one is corrupted
AppArmor 10
Medium
Triaged
#1379540 Support policy versioning
AppArmor 6
Medium
Triaged
#1379884 aa-logprof crash if log contains (encoded) non-utf8 filename
AppArmor 12
Medium
Triaged
#1381709 Improve policy query interface (non-file)
AppArmor 6
Medium
Triaged
#1383858 expr-simplify optimization slows click/snap policy compilation
AppArmor 10
Medium
In Progress
#1383886 disable sha-1 hashing for policy for Ubuntu Touch
AppArmor 6
Medium
Confirmed
#1384735 Mediate anonymous pipes
AppArmor 6
Medium
Confirmed
#1385947 specifying -O to parser causes the parser to not consider cache files
AppArmor 8
Medium
Triaged
#1403968 umount options are incorrectly treated as mount options
AppArmor 6
Medium
Confirmed
#1447530 Random kernel warnings when running apache with mod_apparmor
AppArmor 14
Medium
Confirmed
#1448912 BUG: unable to handle kernel NULL pointer dereference (aa_label_merge)
AppArmor 44
Medium
Confirmed
#1491189 secure exec layering violation
AppArmor 6
Medium
Triaged
#1536539 aa.py's set_process() function doesn't work
AppArmor 6
Medium
Triaged
#1620635 libapparmor's aa_query_label() always returns allowed = 0 for file rules containing the "owner" conditional
AppArmor 20
Medium
Confirmed
#1652101 Can't create nested AppArmor namespaces
AppArmor 24
Medium
Triaged
#1683484 Make clean target is removing files generated as part of tarball release
AppArmor 6
Medium
Confirmed
#1727887 profiles: add accessability abstraction
AppArmor 6
Medium
Confirmed
#1772097 apparmor 'l' denial when using linkat() with attach_disconnected
AppArmor 6
Medium
Confirmed
#1849753 AppArmor profile prohibits classic snap from inheriting file descriptors
AppArmor 134
Medium
Triaged
#1856738 access always denied when using @{HOME} tunable in peer_addr for abstract socket
AppArmor 30
Low
Triaged
#512671 usr/bin/man profile in ...doc...extra dir. in apparmor-profiles package is almost empty
AppArmor 8
Low
Triaged
#595714 aa-status doesn't report an application as unconfined when using path globbing
AppArmor 6
Low
Triaged
#670639 apparmor_parser dfa dominance is incorrect
AppArmor 6
Low
Triaged
#692218 add man page for pam_apparmor
AppArmor 26
Low
Triaged
#731178 Profiles defined with a default globbing and profile name do not attach
AppArmor 6
Low
Triaged
#837209 logprof does not filter input stream for link rules
AppArmor 6
Low
Triaged
#917215 AppArmor doesn't warn about nonexistent subprofiles
AppArmor 22
Low
Confirmed
#970647 Denials due to "deleted" are not being logged
AppArmor 8
Low
Triaged
#984300 confined applications can't read /sys/module/apparmor/parameteres without capability mount
AppArmor 6
Low
Triaged
#1045985 support environment filtering
AppArmor 18
Low
Confirmed
#1117804 ausearch doesn't show AppArmor denial messages
AppArmor 72
Low
Triaged
#1169568 aa-unconfined does not always display unconfined processes with dual-stack
AppArmor 10
Low
Triaged
#1182145 pam_apparmor - confusing errormessage on missing profile or hat
AppArmor 6
Low
Triaged
#1191858 Skype doesn't fully work in enforce mode
AppArmor 6
Low
Triaged
#1197145 child profile names don't allow '-'
AppArmor 10
Low
Triaged
#1210514 Default apache prefork profile doesn't allow chown
AppArmor 8
Low
Triaged
#1215637 Parser incorrectly treats "deny file," rules as invalid
AppArmor 6
Low
Triaged
#1243920 cache hit when cache generated from a different profile
AppArmor 6
Low
Triaged
#1255424 include of dir fails when the number of files in the dir approaches or exceeds the processes fd limit
AppArmor 6
Low
Triaged
#1260090 apparmor_parser complains about '.' and '"' in child profile names
AppArmor 8
Low
Triaged
#1306781 Kernel to userspace communication is needed to notify trusted helpers of profile changes
AppArmor 6
Low
Triaged
#1315469 apparmor_parser should reject pivot_root rules containing non-directory arguments
AppArmor 6
1 → 75 of 370 results First • Previous • • Last
Bug supervisor:
None set

Series-targeted bugs