Apparmor start failure due to /proc/mounts

[abujafar]

Apparmor fails to load application profiles during boot time. I get this message
Unable to find a suitable fs in /proc/mounts, is it mounted? Use --subdomainfs to overide.

[Victor Vargas (kamus)]

What version of ubuntu do you use? please could you include some log files like syslog, kernel.log and dmseg as attachment in your report. Thanks!

[abujafar (abujafar)]

OK, i figured out what the problem is: i am using kernel 2.6.32rc8 from mainline repo.
Apparmor loads fine with ubuntu stock kernel. Is this a bug with the new kernel or a missing patch applied to the stock kernels?

[Steve Beattie (sbeattie)]

abujafar: apparmor has not made it into the upstream kernel yet; you'll either need to use an ubuntu stock kernel or pull the security/apparmor subtree from that kernel and apply it to the mainline kernel in order to use it.

[Rijesh (rijeshd)]

I'm also having same issue

[Jamie Strandboge (jdstrand)]

Rijesh, what kernel are you using (see the output of 'cat /proc/version_signature')?

[Trevor Robinson (eztenia)]

Yay for being a noob. I'm affected by this too, running a 2.6.33.2 kernel.

So how would we go about applying Apparmor to a different kernel?

By the way, doing 'cat /proc/version_signature' just gets me an error: 'No such file'. Wouldn't 'uname -a' work?

[Jamie Strandboge (jdstrand)]

Trevor, if 'cat /proc/version_signature' returns an error, you are running a non-Ubuntu kernel without AppArmor. Please see https://apparmor.wiki.kernel.org/index.php/Main_Page for details on how to patch your kernel to use AppArmor.

[Trevor Robinson (eztenia)]

Well that link actually was a dead-end, the pages were unfinished. Still, from here I'm sure I can look up the git repository myself. Thank you.