abstractions need multiarch support

Bug #736870 reported by Jamie Strandboge on 2011-03-17
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
apparmor (Ubuntu)
High
Jamie Strandboge
Natty
High
Jamie Strandboge

Bug Description

Binary package hint: apparmor

With the upload of 2.13-0ubuntu6, libc6 has changed some of its paths based on DEB_HOST_MULTIARCH. Eg, on amd64:
$ cat /etc/ld.so.conf.d/x86_64-linux-gnu.conf
# Multiarch support
/lib/x86_64-linux-gnu
/usr/lib/x86_64-linux-gnu

and on i386:
$ cat /etc/ld.so.conf.d/i686-linux-gnu.conf
# Multiarch support
/lib/i386-linux-gnu
/usr/lib/i386-linux-gnu
/lib/i686-linux-gnu
/usr/lib/i686-linux-gnu

Paths should be added to the abstractions to use:
/lib/*-linux-gnu/...
/usr/lib/*-linux-gnu/...

We could probably do something like this instead:
/lib/{i386,i686,x86_64}-linux-gnu/...
/usr/lib/{i386,i686,x86_64}-linux-gnu/...

but since there will be different archs on different distributions as well as new archs, I'd prefer to leave the glob.

Changed in apparmor (Ubuntu):
assignee: nobody → Jamie Strandboge (jdstrand)
importance: Undecided → High
milestone: none → ubuntu-11.04-beta-1
status: New → In Progress
Changed in apparmor (Ubuntu Natty):
status: In Progress → Fix Committed
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package apparmor - 2.6.0-0ubuntu3

---------------
apparmor (2.6.0-0ubuntu3) natty; urgency=low

  * debian/patches/0004-lp736870.patch: add multiarch support to abstractions
    (LP: #736870)
 -- Jamie Strandboge <email address hidden> Thu, 17 Mar 2011 09:17:01 -0500

Changed in apparmor (Ubuntu Natty):
status: Fix Committed → Fix Released
Martin Pitt (pitti) wrote :

Reopening, as there are at least a few missing. E. g. cupsd currently fails on PAM, the "authentication" abstraction needs an update.

We should also preemptively update the paths in gnome, kde, and kerberosclient.

Changed in apparmor (Ubuntu Natty):
status: Fix Released → Triaged
Martin Pitt (pitti) wrote :

I'm happy to help with this, but I'm currently blocked on invalid patches:

$ LANG= quilt push -a
Applying patch 0001-add-chromium-browser.patch
patching file profiles/apparmor.d/usr.bin.chromium-browser

Applying patch 0002-lp727478.patch
patching file parser/parser.h
patching file parser/parser_main.c
patching file parser/parser_misc.c
patching file parser/parser.h
Hunk #1 FAILED at 179.
1 out of 1 hunk FAILED -- rejects in file parser/parser.h
patching file parser/parser_main.c
Hunk #1 FAILED at 90.
1 out of 1 hunk FAILED -- rejects in file parser/parser_main.c
patching file parser/parser_misc.c
Hunk #1 FAILED at 29.
Hunk #2 succeeded at 270 with fuzz 2 (offset 67 lines).
Hunk #3 FAILED at 276.
2 out of 3 hunks FAILED -- rejects in file parser/parser_misc.c
Patch 0002-lp727478.patch does not apply (enforce with -f)

This is a clean checkout from current Vcs-Bzr:.

Martin Pitt (pitti) wrote :

slangasek | jdstrand: oh, and on armel the path is /lib/arm-linux-gnueabi/, so doesn't match your glob at all

Jamie Strandboge (jdstrand) wrote :

Sorry about blocker. This is fixed now.

Launchpad Janitor (janitor) wrote :

This bug was fixed in the package apparmor - 2.6.0-0ubuntu4

---------------
apparmor (2.6.0-0ubuntu4) natty; urgency=low

  * Update debian/patches/0004-lp736870.patch (LP: #736870):
    - armel triplet doesn't match '*-linux-gnu'
    - /lib/tls for libc6-xen needs handling
    - gnome, kde, kerberosclient, and authentication abstractions also need
      updating for multiarch.
 -- Steve Langasek <email address hidden> Tue, 22 Mar 2011 15:18:54 -0700

Changed in apparmor (Ubuntu Natty):
status: Triaged → Fix Released
tags: added: multiarch
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers