2016-10-19 06:06:49 |
Jamie Strandboge |
bug |
|
|
added bug |
2016-10-19 06:07:06 |
Jamie Strandboge |
bug task added |
|
linux (Ubuntu) |
|
2016-10-19 06:07:24 |
Jamie Strandboge |
nominated for series |
|
Ubuntu Yakkety |
|
2016-10-19 06:07:24 |
Jamie Strandboge |
bug task added |
|
linux (Ubuntu Yakkety) |
|
2016-10-19 06:07:24 |
Jamie Strandboge |
nominated for series |
|
Ubuntu Xenial |
|
2016-10-19 06:07:24 |
Jamie Strandboge |
bug task added |
|
linux (Ubuntu Xenial) |
|
2016-10-19 06:07:36 |
Jamie Strandboge |
linux (Ubuntu): status |
New |
Triaged |
|
2016-10-19 06:07:39 |
Jamie Strandboge |
linux (Ubuntu Xenial): status |
New |
Triaged |
|
2016-10-19 06:07:42 |
Jamie Strandboge |
linux (Ubuntu Yakkety): status |
New |
Triaged |
|
2016-10-19 06:07:44 |
Jamie Strandboge |
linux (Ubuntu): importance |
Undecided |
Critical |
|
2016-10-19 06:07:47 |
Jamie Strandboge |
linux (Ubuntu Xenial): importance |
Undecided |
Critical |
|
2016-10-19 06:07:49 |
Jamie Strandboge |
linux (Ubuntu Yakkety): importance |
Undecided |
Critical |
|
2016-10-19 08:33:26 |
Tyler Hicks |
bug |
|
|
added subscriber Tyler Hicks |
2016-10-19 15:42:43 |
John Johansen |
linux (Ubuntu Yakkety): status |
Triaged |
Invalid |
|
2016-10-19 15:44:22 |
John Johansen |
nominated for series |
|
Ubuntu Trusty |
|
2016-10-19 15:44:22 |
John Johansen |
bug task added |
|
linux (Ubuntu Trusty) |
|
2016-10-19 15:44:35 |
John Johansen |
linux (Ubuntu Trusty): status |
New |
Triaged |
|
2016-10-19 15:44:47 |
John Johansen |
nominated for series |
|
Ubuntu Precise |
|
2016-10-19 15:44:47 |
John Johansen |
bug task added |
|
linux (Ubuntu Precise) |
|
2016-10-19 15:44:57 |
John Johansen |
linux (Ubuntu Precise): status |
New |
Invalid |
|
2016-10-19 15:45:11 |
John Johansen |
linux (Ubuntu Trusty): importance |
Undecided |
High |
|
2016-10-19 17:09:22 |
Joseph Salisbury |
tags |
aa-kernel |
aa-kernel kernel-da-key |
|
2016-10-19 23:44:02 |
Jamie Strandboge |
description |
This came up in snapd spread tests but can be reproduced with:
In an i386 up to date 16.04 VM:
1. in one terminal, run this:
$ cat changehat_reproducer.sh
#!/bin/sh
set -e
sudo sysctl -w kernel.printk_ratelimit=0
sudo snap install hello-world || true
count=0
while /bin/true ; do
count=$((count+1))
if [ `echo "$count % 100" | bc` -eq 0 ]; then
echo "$count runs"
fi
hello-world > /dev/null || {
tail -100 /var/log/syslog | grep DEN && exit
}
sudo cat /run/snapd/ns/hello-world.mnt 2>/dev/null || sudo /usr/lib/snapd/snap-discard-ns hello-world
done
2. in another terminal run:
$ while do /bin/true ; sudo apparmor_parser -r /etc/apparmor.d/* >/dev/null 2>&1 ; done
3. In another terminal:
$ tail -f /var/log/syslog|grep DEN
This is not limited to i386. |
This came up in snapd spread tests but can be reproduced with:
In an i386 up to date 16.04 VM:
1. in one terminal, run this:
$ cat reproducer.sh
#!/bin/sh
set -e
sudo sysctl -w kernel.printk_ratelimit=0
sudo snap install hello-world || true
count=0
while /bin/true ; do
count=$((count+1))
if [ `echo "$count % 100" | bc` -eq 0 ]; then
echo "$count runs"
fi
hello-world > /dev/null || {
tail -100 /var/log/syslog | grep DEN && exit
}
sudo cat /run/snapd/ns/hello-world.mnt 2>/dev/null || sudo /usr/lib/snapd/snap-discard-ns hello-world
done
2. in another terminal run:
$ while do /bin/true ; sudo apparmor_parser -r /etc/apparmor.d/* >/dev/null 2>&1 ; done
3. In another terminal:
$ tail -f /var/log/syslog|grep DEN
This is not limited to i386. |
|
2016-10-20 02:21:12 |
Launchpad Janitor |
linux (Ubuntu Xenial): status |
Triaged |
Fix Released |
|
2016-10-20 02:21:12 |
Launchpad Janitor |
cve linked |
|
2016-5195 |
|
2016-10-20 02:21:13 |
Launchpad Janitor |
linux (Ubuntu Xenial): status |
Triaged |
Fix Released |
|
2016-10-26 15:00:54 |
Tim Gardner |
linux (Ubuntu Trusty): status |
Triaged |
Fix Committed |
|
2016-11-14 15:51:05 |
Luis Henriques |
tags |
aa-kernel kernel-da-key |
aa-kernel kernel-da-key verification-needed-trusty |
|
2016-11-28 08:49:47 |
Po-Hsu Lin |
description |
This came up in snapd spread tests but can be reproduced with:
In an i386 up to date 16.04 VM:
1. in one terminal, run this:
$ cat reproducer.sh
#!/bin/sh
set -e
sudo sysctl -w kernel.printk_ratelimit=0
sudo snap install hello-world || true
count=0
while /bin/true ; do
count=$((count+1))
if [ `echo "$count % 100" | bc` -eq 0 ]; then
echo "$count runs"
fi
hello-world > /dev/null || {
tail -100 /var/log/syslog | grep DEN && exit
}
sudo cat /run/snapd/ns/hello-world.mnt 2>/dev/null || sudo /usr/lib/snapd/snap-discard-ns hello-world
done
2. in another terminal run:
$ while do /bin/true ; sudo apparmor_parser -r /etc/apparmor.d/* >/dev/null 2>&1 ; done
3. In another terminal:
$ tail -f /var/log/syslog|grep DEN
This is not limited to i386. |
This came up in snapd spread tests but can be reproduced with:
In an i386 up to date 16.04 VM:
1. in one terminal, run this:
$ cat reproducer.sh
#!/bin/sh
set -e
sudo sysctl -w kernel.printk_ratelimit=0
sudo snap install hello-world || true
count=0
while /bin/true ; do
count=$((count+1))
if [ `echo "$count % 100" | bc` -eq 0 ]; then
echo "$count runs"
fi
hello-world > /dev/null || {
tail -100 /var/log/syslog | grep DEN && exit
}
sudo cat /run/snapd/ns/hello-world.mnt 2>/dev/null || sudo /usr/lib/snapd/snap-discard-ns hello-world
done
2. in another terminal run:
$ while /bin/true ;do sudo apparmor_parser -r /etc/apparmor.d/* >/dev/null 2>&1 ; done
3. In another terminal:
$ tail -f /var/log/syslog|grep DEN
This is not limited to i386. |
|
2016-11-28 18:45:09 |
John Johansen |
tags |
aa-kernel kernel-da-key verification-needed-trusty |
aa-kernel kernel-da-key verification-done-trusty |
|
2016-11-30 01:49:25 |
Launchpad Janitor |
linux (Ubuntu Trusty): status |
Fix Committed |
Fix Released |
|
2016-11-30 01:49:25 |
Launchpad Janitor |
cve linked |
|
2016-7425 |
|
2016-11-30 01:49:25 |
Launchpad Janitor |
cve linked |
|
2016-8658 |
|
2017-01-31 23:07:55 |
John Johansen |
apparmor: status |
In Progress |
Invalid |
|
2018-10-03 14:23:11 |
Joseph Salisbury |
linux (Ubuntu): status |
Triaged |
Fix Released |
|
2019-07-24 20:16:48 |
Brad Figg |
tags |
aa-kernel kernel-da-key verification-done-trusty |
aa-kernel cscc kernel-da-key verification-done-trusty |
|