Comment 14 for bug 1989073

Revision history for this message
Christian Ehrhardt  (paelzer) wrote :

That is the commit causing the change [1] in behavior.

That is pretty low level (in libc6) and will probably hit anything that links against libnuma.

I think the fix should therefore go into
  /etc/apparmor.d/abstractions/base

Today it has:
  # glibc's sysconf(3) routine to determine free memory, etc
  @{PROC}/meminfo r,
  @{PROC}/stat r,
  @{PROC}/cpuinfo r,
  @{sys}/devices/system/cpu/ r,
  @{sys}/devices/system/cpu/online r,

And due to [1] I think this needs to get:
  @{sys}/devices/system/cpu/possible r,

That is still missing in upstreams [2] current base profile.

Gladly it isn't too fatal, but still bad.
Retargetting this to the apparmor package.

[1]: https://sourceware.org/git/?p=glibc.git;a=commit;h=97a912f7a832a6
[2]: https://gitlab.com/apparmor/apparmor/-/blob/master/profiles/apparmor.d/abstractions/base#L98