test_260_config_PTI in ubuntu_qrt_kernel_security failed with 4.15 i386

[Po-Hsu Lin]

Test failed with 4.15 i386 kernel, didn't see this on other arches

FAIL: test_260_config_PTI (__main__.KernelSecurityConfigTest)
Ensure kernel page table isolation is set appropriately
----------------------------------------------------------------------
Traceback (most recent call last):
  File "./test-kernel-security.py", line 2566, in test_260_config_PTI
    self.assertKernelConfig('PAGE_TABLE_ISOLATION', expected)
  File "./test-kernel-security.py", line 210, in assertKernelConfig
    self.assertKernelConfigUnset(name)
  File "./test-kernel-security.py", line 201, in assertKernelConfigUnset
    '%s option was expected to be unset in the kernel config' % name)
AssertionError: PAGE_TABLE_ISOLATION option was expected to be unset in the kernel config

[Po-Hsu Lin (cypressyew)]

    def test_260_config_PTI(self):
        '''Ensure kernel page table isolation is set appropriately'''

        expected = True
        archs = ['amd64']
        if self.kernel_at_least('4.19'):
            archs += ['i386']
        if self.dpkg_arch not in archs:
            self._skipped("KPTI only in amd64 and i386 (4.19 and later)")
            expected = False
        self.assertKernelConfig('PAGE_TABLE_ISOLATION', expected)

The last change to this test seems to be in Jan. this year.

[Po-Hsu Lin (cypressyew)]

I think this has something to do with the recent change patch for CVE:
    [SRU][Bionic][PULL] Fix for CVE-2017-5754 (i386)

[Ubuntu Kernel Bot (ubuntu-kernel-bot)]

This bug is missing log files that will aid in diagnosing the problem. While running an Ubuntu kernel (not a mainline or third-party kernel) please enter the following command in a terminal window:

apport-collect 1825108

and then change the status of the bug to 'Confirmed'.

If, due to the nature of the issue you have encountered, you are unable to run this command, please add a comment stating that fact and change the bug status to 'Confirmed'.

This change has been made by an automated script, maintained by the Ubuntu Kernel Team.

[Tyler Hicks (tyhicks)]

QRT does need to be updated now that Bionic has received the CVE-2017-5754 mitigations for i386. I can update QRT.

(There is no kernel bug to fix from this failure)

[Tyler Hicks (tyhicks)]

Fix: https://git.launchpad.net/qa-regression-testing/commit/?id=b5f561affe4eb739c5b01b88569618d59ae6f664