/sys/module/<module>/sections/.text is now 0400 instead of 0444

Bug #1756963 reported by Thadeu Lima de Souza Cascardo
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Confirmed
Undecided
Canonical Kernel Team

Bug Description

When running the kernel security tests from qa-regression-testing, it fails to run 'sudo -u <user> cat /sys/module/<module>/sections/.text', because it's now only owner-readable, instead of world-readable.

The failure is copied below.

This has been changes on 4.15-rc1 by commit
277642dcca765a1955d4c753a5a315ff7f2eb09d ("modules: make sysfs attribute files readable by owner only").

We either want to revert that upstream or fix the test.

  ======================================================================
  FAIL: test_095_kernel_symbols_missing (__main__.KernelSecurityTest)
  kernel addresses in kallsyms and modules are zeroed out
  ----------------------------------------------------------------------
  Traceback (most recent call last):
    File "./test-kernel-security.py", line 1508, in test_095_kernel_symbols_missing
      self._check_pK_files(expected)
    File "./test-kernel-security.py", line 1449, in _check_pK_files
      expected)
    File "./test-kernel-security.py", line 1387, in _read_twice
      self.assertEqual(rc, 0, regular)
  AssertionError: cat: /sys/module/virtio_blk/sections/.text: Permission denied

  ----------------------------------------------------------------------
  Ran 76 tests in 22.227s

  FAILED (failures=1)
 END ERROR ubuntu_qrt_kernel_security.test-kernel-security.py ubuntu_qrt_kernel_security.test-kernel-security.py timestamp=1521472107 localtime=Mar 19 15:08:27

Changed in linux (Ubuntu):
status: New → Confirmed
assignee: nobody → Canonical Kernel Team (canonical-kernel-team)
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.