ubuntu_qrt_apparmor:ApparmorTestsuites.test_regression_testsuite:socketpair fails on Noble 6.17 backport kernels
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| QA Regression Testing |
New
|
Undecided
|
Unassigned | ||
| ubuntu-kernel-tests |
New
|
Undecided
|
Unassigned | ||
| apparmor (Ubuntu) |
New
|
Undecided
|
Unassigned | ||
Bug Description
The socketpair test for AppArmor is failing on all Noble 6.17 backport kernels on all machines with the following log:
10109 07:50:55 ERROR| [stderr] Error: socketpair failed. Test 'SOCKETPAIR (confined exec transition)' was expected to 'pass'. Reason for failure 'FAIL - pair[0]: label "/tmp/testlibp4
10110 07:50:55 ERROR| [stderr] Error: socketpair failed. Test 'SOCKETPAIR (confined exec transition from complain)' was expected to 'pass'. Reason for failure 'FAIL - pair[0]: label "/tmp/testlibp4
10111 07:50:55 ERROR| [stderr] Error: socketpair failed. Test 'SOCKETPAIR (confined exec transition to complain)' was expected to 'pass'. Reason for failure 'FAIL - pair[0]: label "/tmp/testlibp4
10112 07:50:55 ERROR| [stderr] Error: socketpair failed. Test 'SOCKETPAIR (confined 2 exec transitions)' was expected to 'pass'. Reason for failure 'FAIL - pair[0]: label "/tmp/testlibp4
In short, the tests failing are:
SOCKETPAIR (confined exec transition)
SOCKETPAIR (confined exec transition from complain)
SOCKETPAIR (confined exec transition to complain)
SOCKETPAIR (confined 2 exec transitions)
And the reason given is:
label "/tmp/testlibp4
Because this is failing for the initial Noble 6.17 kernels, it's not considered a regression and can be initially hinted.
| tags: | added: 6.17 noble ubuntu-qrt-apparmor |
| tags: | added: sec-8107 |

6.17 fixes an issue in the unix socket mediation. Unfortunately the fix, even with the compatibility patches does cause some regression test breakage. The fix for the regression tests is in the 26.10 (Questing) apparmor.
QRT uses the regression tests from the apparmor version that is packaged in the release. This is going to require an SRU of the patches that address this from 26.10 (Questing) to the 24.04 (Noble), apparmor userspace.