Comment 3 for bug 1644302

Revision history for this message
Steve Beattie (sbeattie) wrote :

I'm able to reproduce this on an amd64 guest with the lts-backport-trusty kernel installed, though I get a different signal:

ubuntu@sec-precise-amd64:~/tmp/apparmor-2.7.102/tests/regression/apparmor$ sudo sh -c 'VERBOSE=1 bash mount.sh'
ok: MOUNT (unconfined)
ok: UMOUNT (unconfined)
/home/ubuntu/tmp/apparmor-2.7.102/tests/regression/apparmor/prologue.inc: line 130: 1955 Segmentation fault $testexec "$@" > $outfile 2>&1
Error: mount failed. Test 'MOUNT (confined)' was expected to 'fail'. Reason for failure 'killed by signal 11'
/home/ubuntu/tmp/apparmor-2.7.102/tests/regression/apparmor/prologue.inc: line 130: 1983 Segmentation fault $testexec "$@" > $outfile 2>&1
Error: mount failed. Test 'MOUNT (confined)' was expected to 'fail'. Reason for failure 'killed by signal 11'
umount: /tmp/sdtest.1910-26089-jAP0bK/mountpoint: not mounted

Oddly, it does *not* reproduce on trusty with the trusty kernel. Checking dmesg, there are oops related to the failing tests:

[ 149.340700] type=1400 audit(1479925322.639:66): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/home/ubuntu/tmp/apparmor-2.7.102/tests/regression/apparmor/mount" pid=1951 comm="apparmor_parser"
[ 149.347436] general protection fault: 0000 [#3] SMP
[ 149.347443] Modules linked in: snd_hda_intel snd_hda_codec snd_hwdep snd_pcm snd_seq_midi snd_rawmidi snd_seq_midi_event snd_seq snd_seq_device psmouse kvm_amd snd_timer serio_raw kvm snd soundcore snd_page_alloc vmwgfx ttm bnep drm mac_hid i2c_piix4 parport_pc ppdev rfcomm lp parport bluetooth floppy pata_acpi
[ 149.347461] CPU: 0 PID: 1955 Comm: mount Tainted: G D 3.13.0-102-generic #149~precise1-Ubuntu
[ 149.347464] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Ubuntu-1.8.2-1ubuntu2 04/01/2014
[ 149.347480] task: ffff88002b7be000 ti: ffff88002bdda000 task.ti: ffff88002bdda000
[ 149.347482] RIP: 0010:[<ffffffff8133815c>] [<ffffffff8133815c>] aa_new_mount+0x1ec/0x3f0
[ 149.347488] RSP: 0018:ffff88002bddbda8 EFLAGS: 00010246
[ 149.347490] RAX: 70656c65742f6269 RBX: ffff88002c2cc830 RCX: ffff88002bddbe48
[ 149.347491] RDX: ffff88002d038000 RSI: 0000000000000000 RDI: ffff88002bddbe20
[ 149.347492] RBP: ffff88002bddbe88 R08: ffff88002bddbe50 R09: ffff88002bddbe50
[ 149.347494] R10: ffff88002d03a000 R11: 0000000000000005 R12: ffff88002d038000
[ 149.347495] R13: ffff88002eec0dd0 R14: ffff88002bddbed8 R15: 0000000000000001
[ 149.347509] FS: 00007fe19e83f700(0000) GS:ffff88002fc00000(0000) knlGS:0000000000000000
[ 149.347511] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 149.347512] CR2: 00007fe19e2a8e80 CR3: 000000002ab22000 CR4: 00000000000007f0
[ 149.347515] Stack:
[ 149.347517] ffff88002bddbed8 ffff880029944020 0000000000000000 ffff880029dbf120
[ 149.347519] ffff88002bddbdf8 ffffffff811de862 ffff880029944020 0000000000000000
[ 149.347522] 0000000000000000 0000000000000000 ffff88002bddbeb8 ffffffff811dea00
[ 149.347524] Call Trace:
[ 149.347529] [<ffffffff811de862>] ? do_path_lookup+0x32/0x40
[ 149.347532] [<ffffffff811dea00>] ? vfs_path_lookup+0x20/0x70
[ 149.347534] [<ffffffff8132ed8d>] apparmor_sb_mount+0x9d/0x110
[ 149.347538] [<ffffffff812f0f56>] security_sb_mount+0x16/0x20
[ 149.347542] [<ffffffff811f275d>] do_mount+0xcd/0x260
[ 149.347544] [<ffffffff811f2c70>] SyS_mount+0x90/0xe0
[ 149.347548] [<ffffffff8177b25d>] system_call_fastpath+0x1a/0x1f
[ 149.347549] Code: 8d 4d c8 74 69 f6 43 41 02 0f 84 ac 01 00 00 48 8b 45 a0 31 f6 4c 8d 4d c8 48 8d 4d c0 48 8d 7d 98 4c 89 e2 4d 89 c8 48 8b 40 30 <0f> b7 00 25 00 f0 00 00 3d 00 40 00 00 40 0f 94 c6 0b b3 98 00
[ 149.347569] RIP [<ffffffff8133815c>] aa_new_mount+0x1ec/0x3f0
[ 149.347571] RSP <ffff88002bddbda8>
[ 149.347574] ---[ end trace 9d8309400bc67aeb ]---
[ 149.413362] type=1400 audit(1479925322.711:67): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/home/ubuntu/tmp/apparmor-2.7.102/tests/regression/apparmor/mount" pid=1978 comm="apparmor_parser"
[ 149.421641] general protection fault: 0000 [#4] SMP
[ 149.421648] Modules linked in: snd_hda_intel snd_hda_codec snd_hwdep snd_pcm snd_seq_midi snd_rawmidi snd_seq_midi_event snd_seq snd_seq_device psmouse kvm_amd snd_timer serio_raw kvm snd soundcore snd_page_alloc vmwgfx ttm bnep drm mac_hid i2c_piix4 parport_pc ppdev rfcomm lp parport bluetooth floppy pata_acpi
[ 149.421666] CPU: 0 PID: 1983 Comm: mount Tainted: G D 3.13.0-102-generic #149~precise1-Ubuntu
[ 149.421668] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Ubuntu-1.8.2-1ubuntu2 04/01/2014
[ 149.421671] task: ffff88002c2ec800 ti: ffff88002ebde000 task.ti: ffff88002ebde000
[ 149.421673] RIP: 0010:[<ffffffff8133815c>] [<ffffffff8133815c>] aa_new_mount+0x1ec/0x3f0
[ 149.421679] RSP: 0018:ffff88002ebdfda8 EFLAGS: 00010246
[ 149.421680] RAX: 70656c65742f6269 RBX: ffff88002eefd030 RCX: ffff88002ebdfe48
[ 149.421682] RDX: ffff88002d038000 RSI: 0000000000000000 RDI: ffff88002ebdfe20
[ 149.421683] RBP: ffff88002ebdfe88 R08: ffff88002ebdfe50 R09: ffff88002ebdfe50
[ 149.421685] R10: ffff88002d03a000 R11: 0000000000000005 R12: ffff88002d038000
[ 149.421686] R13: ffff88002eec0fb0 R14: ffff88002ebdfed8 R15: 0000000000000001
[ 149.421700] FS: 00007f5d7ca9e700(0000) GS:ffff88002fc00000(0000) knlGS:0000000000000000
[ 149.421702] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 149.421703] CR2: 00007f5d7c507e80 CR3: 0000000029d99000 CR4: 00000000000007f0
[ 149.421706] Stack:
[ 149.421708] ffff88002ebdfed8 ffff8800297f7020 0000000000000000 ffff880029dbf190
[ 149.421711] ffff88002ebdfdf8 ffffffff811de862 ffff8800297f7020 0000000000000000
[ 149.421713] 0000000000000000 0000000000000000 ffff88002ebdfeb8 ffffffff811dea00
[ 149.421715] Call Trace:
[ 149.421720] [<ffffffff811de862>] ? do_path_lookup+0x32/0x40
[ 149.421735] [<ffffffff811dea00>] ? vfs_path_lookup+0x20/0x70
[ 149.421738] [<ffffffff8132ed8d>] apparmor_sb_mount+0x9d/0x110
[ 149.421741] [<ffffffff812f0f56>] security_sb_mount+0x16/0x20
[ 149.421745] [<ffffffff811f275d>] do_mount+0xcd/0x260
[ 149.421748] [<ffffffff811f2c70>] SyS_mount+0x90/0xe0
[ 149.421752] [<ffffffff8177b25d>] system_call_fastpath+0x1a/0x1f
[ 149.421753] Code: 8d 4d c8 74 69 f6 43 41 02 0f 84 ac 01 00 00 48 8b 45 a0 31 f6 4c 8d 4d c8 48 8d 4d c0 48 8d 7d 98 4c 89 e2 4d 89 c8 48 8b 40 30 <0f> b7 00 25 00 f0 00 00 3d 00 40 00 00 40 0f 94 c6 0b b3 98 00
[ 149.421772] RIP [<ffffffff8133815c>] aa_new_mount+0x1ec/0x3f0
[ 149.421775] RSP <ffff88002ebdfda8>
[ 149.421777] ---[ end trace 9d8309400bc67aec ]---
[ 149.439324] type=1400 audit(1479925322.735:68): apparmor="STATUS" operation="profile_remove" profile="unconfined" name="/home/ubuntu/tmp/apparmor-2.7.102/tests/regression/apparmor/mount" pid=1990 comm="apparmor_parser"