AppArmor: kernel module fails to handle namespace removal correctly

[John Johansen]

As reported on lkml, there is a bug in AppArmor profile namespace removal that can lead to an oops are deadlock, when the namespace is specified without a profile.

eg. If the profile namespace foo, extists in the kernel
echo -n ":foo:" >/sys/kernel/security/apparmor/.remove

will trigger this bug.

[kernel-janitor (kernel-janitor)]

Fix released in 2.6.35-22.32

https://launchpad.net/ubuntu/+source/linux/2.6.35-22.32

[Martin Pitt (pitti)]

Accepted linux into maverick-proposed, the package will build now and be available in a few hours. Please test and give feedback here. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you in advance!

[Brad Figg (brad-figg)]

This bug is awaiting verification that the kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed' to 'verification-done'.

If verification is not done by one week from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

[John Johansen (jjohansen)]

Tested this on the kernel and it is working correctly