failed to set /proc/self/attr/keycreate on procfs: write /proc/self/attr/keycreate: invalid argument

[Simon Mijolovic]

$ lsb_release -rd
Description: Ubuntu 20.04.1 LTS
Release: 20.04

Looking to identify if/when the following selinux kernel patch was added to the focal Ubuntu branch:

https://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux.git/commit/?id=464c258aa45b09f16aa0f05847ed8895873262d9

I'm running into an issue with the error:
container_linux.go:370: starting container process caused: process_linux.go:459: container init caused: failed to set /proc/self/attr/keycreate on procfs: write /proc/self/attr/keycreate: invalid argument

That requires this kernel patch.

I see it in the changelog for the linux-hwe packaging for the 5.3 kernel but doesn't appear to be added to the 5.4 GA kernel of focal (5.4.0-64-generic).

https://lists.ubuntu.com/archives/bionic-changes/2020-January/024364.html

I also installed linux-hwe on focal to bring the kernel to 5.8, and the issue persists.

How do we request this patch to be included in 20.04 LTS branch?

Thank you for your help in advance.

[Ubuntu Foundations Team Bug Bot (crichton)]

Thank you for taking the time to report this bug and helping to make Ubuntu better. It seems that your bug report is not filed about a specific source package though, rather it is just filed against Ubuntu in general. It is important that bug reports be filed about source packages so that people interested in the package can find the bugs about it. You can find some hints about determining what package your bug might be about at https://wiki.ubuntu.com/Bugs/FindRightPackage. You might also ask for help in the #ubuntu-bugs irc channel on Freenode.

To change the source package that this bug is filed about visit https://bugs.launchpad.net/ubuntu/+bug/1913491/+editstatus and add the package name in the text box next to the word Package.

[This is an automated message. I apologize if it reached you inappropriately; please just reply to this message indicating so.]

[Ubuntu Kernel Bot (ubuntu-kernel-bot)]

This bug is missing log files that will aid in diagnosing the problem. While running an Ubuntu kernel (not a mainline or third-party kernel) please enter the following command in a terminal window:

apport-collect 1913491

and then change the status of the bug to 'Confirmed'.

If, due to the nature of the issue you have encountered, you are unable to run this command, please add a comment stating that fact and change the bug status to 'Confirmed'.

This change has been made by an automated script, maintained by the Ubuntu Kernel Team.

[Simon Mijolovic (smijolovic)]

This is a specific question about the inclusion of a patch in the Ubuntu kernel from upstream. A log report is not applicable.