Verification passed for mantic-linux-lowlatency. I ran the AppArmor QA Regression Tests [1] checked file permissions for /proc/sys/kernel/*unprivileged*.
georgia@sec-mantic-amd64:~$ uname -a
Linux sec-mantic-amd64 6.5.0-14-lowlatency #14.1-Ubuntu SMP PREEMPT_DYNAMIC Mon Nov 20 13:01:26 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
georgia@sec-mantic-amd64:~$ ll /proc/sys/kernel/*unprivileged*
-rw------- 1 root root 0 Jan 12 14:22 /proc/sys/kernel/apparmor_restrict_unprivileged_io_uring
-rw-r--r-- 1 root root 0 Jan 12 14:19 /proc/sys/kernel/apparmor_restrict_unprivileged_unconfined
-rw-r--r-- 1 root root 0 Jan 12 14:19 /proc/sys/kernel/apparmor_restrict_unprivileged_userns
-rw------- 1 root root 0 Jan 12 14:22 /proc/sys/kernel/apparmor_restrict_unprivileged_userns_complain
-rw------- 1 root root 0 Jan 12 14:22 /proc/sys/kernel/apparmor_restrict_unprivileged_userns_force
-rw-r--r-- 1 root root 0 Jan 12 14:22 /proc/sys/kernel/unprivileged_bpf_disabled
-rw------- 1 root root 0 Jan 12 14:22 /proc/sys/kernel/unprivileged_userns_apparmor_policy
-rw-r--r-- 1 root root 0 Jan 12 14:19 /proc/sys/kernel/unprivileged_userns_clone
georgia@sec-mantic-amd64:~/qrt-test-apparmor$ sudo ./test-apparmor.py
.....
----------------------------------------------------------------------
Ran 62 tests in 1745.243s
Verification passed for mantic- linux-lowlatenc y. I ran the AppArmor QA Regression Tests [1] checked file permissions for /proc/sys/ kernel/ *unprivileged* .
georgia@ sec-mantic- amd64:~ $ uname -a
Linux sec-mantic-amd64 6.5.0-14-lowlatency #14.1-Ubuntu SMP PREEMPT_DYNAMIC Mon Nov 20 13:01:26 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
georgia@ sec-mantic- amd64:~ $ ll /proc/sys/ kernel/ *unprivileged* kernel/ apparmor_ restrict_ unprivileged_ io_uring kernel/ apparmor_ restrict_ unprivileged_ unconfined kernel/ apparmor_ restrict_ unprivileged_ userns kernel/ apparmor_ restrict_ unprivileged_ userns_ complain kernel/ apparmor_ restrict_ unprivileged_ userns_ force kernel/ unprivileged_ bpf_disabled kernel/ unprivileged_ userns_ apparmor_ policy kernel/ unprivileged_ userns_ clone
-rw------- 1 root root 0 Jan 12 14:22 /proc/sys/
-rw-r--r-- 1 root root 0 Jan 12 14:19 /proc/sys/
-rw-r--r-- 1 root root 0 Jan 12 14:19 /proc/sys/
-rw------- 1 root root 0 Jan 12 14:22 /proc/sys/
-rw------- 1 root root 0 Jan 12 14:22 /proc/sys/
-rw-r--r-- 1 root root 0 Jan 12 14:22 /proc/sys/
-rw------- 1 root root 0 Jan 12 14:22 /proc/sys/
-rw-r--r-- 1 root root 0 Jan 12 14:19 /proc/sys/
georgia@ sec-mantic- amd64:~ /qrt-test- apparmor$ sudo ./test-apparmor.py ------- ------- ------- ------- ------- ------- ------- ------- -------
.....
-------
Ran 62 tests in 1745.243s
OK (skipped=3)
[1] https:/ /launchpad. net/qa- regression- testing