Activity log for bug #1750594

Date Who What changed Old value New value Message
2018-02-20 15:23:44 Jamie Strandboge bug added bug
2018-02-20 15:26:05 Jamie Strandboge description In profile set A I have 120 profiles then in profile set B I have the same 120 profile names but with different profiles. If I use apparmor_parser -r on A, then B, then A, etc, eventually OOM is triggered. Reproducer: $ wget http://people.canonical.com/~jamie/aa/bug.tar.gz $ tar -zxvf ./bug.tar.gz $ while /bin/true ; do for i in bug/orig/* bug/new/* ; do sudo apparmor_parser --write-cache -O no-expr-simplify --cache-loc=/var/cache/apparmor --quiet -r $i ; done ; done I tested this with the 4.13 artful release and -updates kernels (ie, before meltdown/spectre and after) with the same result. I'm told the bionic kernel is also affected. 4.10 may also be affected. First reported here: https://forum.snapcraft.io/t/oom-for-interfaces-many-on-bionic-i386/4101 In profile set A I have 120 profiles then in profile set B I have the same 120 profile names but with different rules. If I use apparmor_parser -r on A, then B, then A, etc, eventually OOM is triggered. Reproducer: $ wget http://people.canonical.com/~jamie/aa/bug.tar.gz $ tar -zxvf ./bug.tar.gz $ while /bin/true ; do for i in bug/orig/* bug/new/* ; do sudo apparmor_parser --write-cache -O no-expr-simplify --cache-loc=/var/cache/apparmor --quiet -r $i ; done ; done I tested this with the 4.13 artful release and -updates kernels (ie, before meltdown/spectre and after) with the same result. I'm told the bionic kernel is also affected. 4.10 may also be affected. First reported here: https://forum.snapcraft.io/t/oom-for-interfaces-many-on-bionic-i386/4101
2018-02-20 15:31:53 Jamie Strandboge description In profile set A I have 120 profiles then in profile set B I have the same 120 profile names but with different rules. If I use apparmor_parser -r on A, then B, then A, etc, eventually OOM is triggered. Reproducer: $ wget http://people.canonical.com/~jamie/aa/bug.tar.gz $ tar -zxvf ./bug.tar.gz $ while /bin/true ; do for i in bug/orig/* bug/new/* ; do sudo apparmor_parser --write-cache -O no-expr-simplify --cache-loc=/var/cache/apparmor --quiet -r $i ; done ; done I tested this with the 4.13 artful release and -updates kernels (ie, before meltdown/spectre and after) with the same result. I'm told the bionic kernel is also affected. 4.10 may also be affected. First reported here: https://forum.snapcraft.io/t/oom-for-interfaces-many-on-bionic-i386/4101 In profile set A I have 120 profiles then in profile set B I have the same 120 profile names but with different rules. If I use apparmor_parser -r on A, then B, then A, etc, eventually OOM is triggered. Reproducer (I did it with a 768M i386 17.10 desktop install in a VM, but am told that amd64 is affected too, just takes longer): $ wget http://people.canonical.com/~jamie/aa/bug.tar.gz $ tar -zxvf ./bug.tar.gz $ while /bin/true ; do for i in bug/orig/* bug/new/* ; do sudo apparmor_parser --write-cache -O no-expr-simplify --cache-loc=/var/cache/apparmor --quiet -r $i ; done ; done I tested this with the 4.13 artful release and -updates kernels (ie, before meltdown/spectre and after) with the same result. I'm told the bionic kernel is also affected. 4.10 may also be affected. First reported here: https://forum.snapcraft.io/t/oom-for-interfaces-many-on-bionic-i386/4101
2018-04-12 18:54:55 Zygmunt Krynicki apparmor: status New Confirmed
2018-04-16 10:25:48 Zygmunt Krynicki apparmor: status Confirmed Fix Committed