2018-02-20 15:26:05 |
Jamie Strandboge |
description |
In profile set A I have 120 profiles then in profile set B I have the same 120 profile names but with different profiles. If I use apparmor_parser -r on A, then B, then A, etc, eventually OOM is triggered.
Reproducer:
$ wget http://people.canonical.com/~jamie/aa/bug.tar.gz
$ tar -zxvf ./bug.tar.gz
$ while /bin/true ; do for i in bug/orig/* bug/new/* ; do sudo apparmor_parser --write-cache -O no-expr-simplify --cache-loc=/var/cache/apparmor --quiet -r $i ; done ; done
I tested this with the 4.13 artful release and -updates kernels (ie, before meltdown/spectre and after) with the same result. I'm told the bionic kernel is also affected. 4.10 may also be affected.
First reported here: https://forum.snapcraft.io/t/oom-for-interfaces-many-on-bionic-i386/4101 |
In profile set A I have 120 profiles then in profile set B I have the same 120 profile names but with different rules. If I use apparmor_parser -r on A, then B, then A, etc, eventually OOM is triggered.
Reproducer:
$ wget http://people.canonical.com/~jamie/aa/bug.tar.gz
$ tar -zxvf ./bug.tar.gz
$ while /bin/true ; do for i in bug/orig/* bug/new/* ; do sudo apparmor_parser --write-cache -O no-expr-simplify --cache-loc=/var/cache/apparmor --quiet -r $i ; done ; done
I tested this with the 4.13 artful release and -updates kernels (ie, before meltdown/spectre and after) with the same result. I'm told the bionic kernel is also affected. 4.10 may also be affected.
First reported here: https://forum.snapcraft.io/t/oom-for-interfaces-many-on-bionic-i386/4101 |
|
2018-02-20 15:31:53 |
Jamie Strandboge |
description |
In profile set A I have 120 profiles then in profile set B I have the same 120 profile names but with different rules. If I use apparmor_parser -r on A, then B, then A, etc, eventually OOM is triggered.
Reproducer:
$ wget http://people.canonical.com/~jamie/aa/bug.tar.gz
$ tar -zxvf ./bug.tar.gz
$ while /bin/true ; do for i in bug/orig/* bug/new/* ; do sudo apparmor_parser --write-cache -O no-expr-simplify --cache-loc=/var/cache/apparmor --quiet -r $i ; done ; done
I tested this with the 4.13 artful release and -updates kernels (ie, before meltdown/spectre and after) with the same result. I'm told the bionic kernel is also affected. 4.10 may also be affected.
First reported here: https://forum.snapcraft.io/t/oom-for-interfaces-many-on-bionic-i386/4101 |
In profile set A I have 120 profiles then in profile set B I have the same 120 profile names but with different rules. If I use apparmor_parser -r on A, then B, then A, etc, eventually OOM is triggered.
Reproducer (I did it with a 768M i386 17.10 desktop install in a VM, but am told that amd64 is affected too, just takes longer):
$ wget http://people.canonical.com/~jamie/aa/bug.tar.gz
$ tar -zxvf ./bug.tar.gz
$ while /bin/true ; do for i in bug/orig/* bug/new/* ; do sudo apparmor_parser --write-cache -O no-expr-simplify --cache-loc=/var/cache/apparmor --quiet -r $i ; done ; done
I tested this with the 4.13 artful release and -updates kernels (ie, before meltdown/spectre and after) with the same result. I'm told the bionic kernel is also affected. 4.10 may also be affected.
First reported here: https://forum.snapcraft.io/t/oom-for-interfaces-many-on-bionic-i386/4101 |
|