stress_smoke_test passing and exiting rc=9 (linux 4.9.0-12.13 ADT test failure with linux 4.9.0-12.13)

Bug #1658633 reported by Andy Whitcroft
14
This bug affects 2 people
Affects Status Importance Assigned to Milestone
Linux
Unknown
Unknown
linux (Ubuntu)
Fix Released
High
Colin Ian King
Trusty
Fix Released
Undecided
Unassigned
Xenial
Fix Released
Undecided
Unassigned
Yakkety
Fix Released
Undecided
Unassigned

Bug Description

== SRU Request [ Trusty, Xenial, Yakkey ] + Zesty ==

When running the stress-ng --xattr stressor with several instances of the stressor on ext4 we can trip an xattr bug in the ext4 file system.

== Fix ==

Upstream commit: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=dac7a4b4b1f664934e8b713f529b629f67db313c

ext4: lock the xattr block before checksuming it

We must lock the xattr block before calculating or verifying the
checksum in order to avoid spurious checksum failures.

https://bugzilla.kernel.org/show_bug.cgi?id=193661

Reported-by: Colin Ian King <email address hidden>
Signed-off-by: Theodore Ts'o <email address hidden>
Cc: <email address hidden>

== Test case ==

Fire up an x86 VM with 8 or more CPUs in the instance, run:

stress-ng --xattr 0 -t 60 -v

Without the fix, the file system will report broken xattrs and the file system will go read-only.

With the fix, it runs without fault.

== Regression Potential ==

This changes the checksumming in the ext4 xattr so it only touches the ext4 xattr part of the file system. Risk is therefore contained in the xattr handling on ext4. Tested with stress-ng and the generic file system tests without any regressions, so risk is limited and small.

---------------------------------------------------------

Testing failed on:
    ppc64el: https://objectstorage.prodstack4-5.canonical.com/v1/AUTH_77e2ada1e7a84929a74ba3b87153c0ac/autopkgtest-zesty/zesty/ppc64el/l/linux/20170122_110123_770b2@/log.gz

CVE References

Andy Whitcroft (apw)
tags: added: kernel-adt-failure
Revision history for this message
Brad Figg (brad-figg) wrote : Missing required logs.

This bug is missing log files that will aid in diagnosing the problem. From a terminal window please run:

apport-collect 1658633

and then change the status of the bug to 'Confirmed'.

If, due to the nature of the issue you have encountered, you are unable to run this command, please add a comment stating that fact and change the bug status to 'Confirmed'.

This change has been made by an automated script, maintained by the Ubuntu Kernel Team.

Changed in linux (Ubuntu):
status: New → Incomplete
Revision history for this message
Andy Whitcroft (apw) wrote : Re: linux 4.9.0-12.13 ADT test failure with linux 4.9.0-12.13
Download full text (3.4 KiB)

If I am reading this right the stress-smoke-tests are passing and still exiting 9:

10:48:46 DEBUG| Running '/tmp/autopkgtest.Oam7xW/build.p0V/linux-4.9.0/autotest/client/tests/ubuntu_stress_smoke_test/ubuntu_stress_smoke_test.sh'
10:48:56 DEBUG| [stdout] affinity PASSED
10:49:06 DEBUG| [stdout] af-alg PASSED
10:49:16 DEBUG| [stdout] aio PASSED
10:49:26 DEBUG| [stdout] aiol PASSED
10:49:36 DEBUG| [stdout] atomic PASSED
10:49:46 DEBUG| [stdout] bigheap PASSED
10:49:46 DEBUG| [stdout] bind-mount SKIPPED (test framework out of resources or test should not be run)
10:49:57 DEBUG| [stdout] brk PASSED
10:50:07 DEBUG| [stdout] bsearch PASSED
10:50:17 DEBUG| [stdout] cache PASSED
10:50:27 DEBUG| [stdout] cap PASSED
10:50:37 DEBUG| [stdout] chdir PASSED
10:50:47 DEBUG| [stdout] chmod PASSED
10:50:57 DEBUG| [stdout] chown PASSED
10:51:07 DEBUG| [stdout] clock PASSED
10:51:21 DEBUG| [stdout] clone PASSED
10:51:32 DEBUG| [stdout] context PASSED
10:51:42 DEBUG| [stdout] cpu PASSED
10:51:52 DEBUG| [stdout] crypt PASSED
10:52:02 DEBUG| [stdout] daemon PASSED
10:52:03 DEBUG| [stdout] dccp PASSED
10:52:13 DEBUG| [stdout] dentry PASSED
10:52:23 DEBUG| [stdout] dir PASSED
10:52:33 DEBUG| [stdout] dirdeep PASSED
10:52:43 DEBUG| [stdout] dnotify PASSED
10:52:53 DEBUG| [stdout] dup PASSED
10:53:03 DEBUG| [stdout] epoll PASSED
10:53:13 DEBUG| [stdout] eventfd PASSED
10:53:23 DEBUG| [stdout] fallocate PASSED
10:53:33 DEBUG| [stdout] fanotify PASSED
10:53:43 DEBUG| [stdout] fault PASSED
10:53:53 DEBUG| [stdout] fcntl PASSED
10:54:04 DEBUG| [stdout] fiemap PASSED
10:54:14 DEBUG| [stdout] fifo PASSED
10:54:24 DEBUG| [stdout] filename PASSED
10:54:34 DEBUG| [stdout] flock PASSED
10:54:44 DEBUG| [stdout] fork PASSED
10:54:54 DEBUG| [stdout] fp-error PASSED
10:55:04 DEBUG| [stdout] fstat PASSED
10:55:14 DEBUG| [stdout] full PASSED
10:55:24 DEBUG| [stdout] futex PASSED
10:55:34 DEBUG| [stdout] get PASSED
10:55:44 DEBUG| [stdout] getdent PASSED
10:55:54 DEBUG| [stdout] getrandom PASSED
10:56:04 DEBUG| [stdout] handle PASSED
10:56:16 DEBUG| [stdout] hdd PASSED
10:56:26 DEBUG| [stdout] heapsort PASSED
10:56:36 DEBUG| [stdout] hsearch PASSED
10:56:36 DEBUG| [stdout] icache PASSED
10:56:46 DEBUG| [stdout] icmp-flood PASSED
10:56:56 DEBUG| [stdout] inotify PASSED
10:57:06 DEBUG| [stdout] io PASSED
10:57:16 DEBUG| [stdout] ioprio PASSED
10:57:26 DEBUG| [stdout] itimer PASSED
10:57:27 DEBUG| [stdout] key PASSED
10:57:37 DEBUG| [stdout] kill PASSED
10:57:47 DEBUG| [stdout] klog PASSED
10:57:57 DEBUG| [stdout] lease PASSED
10:58:07 DEBUG| [stdout] link PASSED
10:58:07 DEBUG| [stdout] lockbus PASSED
10:58:17 DEBUG| [stdout] locka PASSED
10:58:27 DEBUG| [stdout] lockf PASSED
10:58:37 DEBUG| [stdout] lockofd PASSED
10:58:47 DEBUG| [stdout] longjmp PASSED
10:58:57 DEBUG| [stdout] lsearch PASSED
10:59:07 DEBUG| [stdout] madvise PASSED
10:59:18 DEBUG| [stdout] malloc PASSED
10:59:28 DEBUG| [stdout] matrix PASSED
10:59:38 DEBUG| [stdout] membarrier PASSED
10:59:48 DEBUG| [stdout] memcpy PASSED
10:59:58 DEBUG| [stdout] memfd PASSED
11:00:08 DEBUG| [stdout] mergesort PASSED
11:00:18 DEBUG| [stdout] mincore PASSED
11:00:28 DEBUG| [stdout] mknod PASSED
11:00:34 INFO | ERROR ubuntu_stress_smo...

Read more...

description: updated
summary: - linux 4.9.0-12.13 ADT test failure with linux 4.9.0-12.13
+ stress_smoke_test passing and exiting rc=9 (linux 4.9.0-12.13 ADT test
+ failure with linux 4.9.0-12.13)
Changed in linux (Ubuntu):
status: Incomplete → Confirmed
Changed in linux (Ubuntu):
assignee: nobody → Colin Ian King (colin-king)
importance: Undecided → High
status: Confirmed → In Progress
Revision history for this message
Colin Ian King (colin-king) wrote :

It is more probable that the mlock (or mmap) or later tests broke the test and we are just seeing the last PASSED tests that got fflushed to stdout before the ADT framework terminated.

Revision history for this message
Colin Ian King (colin-king) wrote :

Right, I think this occurs when ext4 goes read-only. A simple way to reproduce this on i386 systems with that kernel is:

sudo stress-ng --sockpair 10 && sudo stress-ng --xattr 10

xattr test causes ext4 to detect xattr issues and the file system gets remounted r/o, and we no longer can log the stress-ng ADT test log.

Revision history for this message
Colin Ian King (colin-king) wrote :

Does not break on xfs, so looks like an ext4 issue

Revision history for this message
Colin Ian King (colin-king) wrote :

Only breaks with ext4, i386 and > 1 cpu. Can't break amd64 or uniprocessor configs.

Revision history for this message
Colin Ian King (colin-king) wrote :

Issue still in 4.10-rc6

Revision history for this message
Colin Ian King (colin-king) wrote :

OK, looks like a need a cleanly formatted ext4 file system before *each* bisect otherwise I'm picking up xattr corruption from previous bisects.

Revision history for this message
Colin Ian King (colin-king) wrote :

Still an issue with 4.10

description: updated
description: updated
Changed in linux (Ubuntu Trusty):
status: New → Fix Committed
Changed in linux (Ubuntu Xenial):
status: New → Fix Committed
Changed in linux (Ubuntu Yakkety):
status: New → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (21.0 KiB)

This bug was fixed in the package linux - 4.10.0-19.21

---------------
linux (4.10.0-19.21) zesty; urgency=low

  [ Tim Gardner ]

  * Release Tracking Bug
    - LP: #1680535

  * ADT regressions caused by "audit: fix auditd/kernel connection state
    tracking" (LP: #1680532)
    - SAUCE: Revert "audit: fix auditd/kernel connection state tracking"

  * Miscellaneous Ubuntu changes
    - [Config] updateconfigs to update CONFIG_GENERIC_CSUM for ppc64el
      This cleans up behind a Kconfig change that went undetected.

linux (4.10.0-18.20) zesty; urgency=low

  [ Tim Gardner ]

  * Release Tracking Bug
    - LP: #1680168

  * smartpqi driver needed in initram disk and installer (LP: #1680156)
    - UBUNU: [Config] Add smartpqi to d-i

linux (4.10.0-17.19) zesty; urgency=low

  [ Tim Gardner ]

  * Release Tracking Bug
    - LP: #1679718

  * Fix CVE-2017-7308 (LP: #1678009)
    - net/packet: fix overflow in check for priv area size
    - net/packet: fix overflow in check for tp_frame_nr
    - net/packet: fix overflow in check for tp_reserve

  * apparmor: oops on boot if parameters set on grub command line (LP: #1678048)
    - SAUCE: apparmor: fix parameters so that the permission test is bypassed at boot

  * apparmor: does not provide a way to detect policy updataes (LP: #1678032)
    - SAUCE: apparmor: add policy revision file interface

  * apparmor does not make support of query data visible (LP: #1678023)
    - SAUCE: apparmor: add label data availability to the feature set

  * apparmor query interface does not make supported query info available
    (LP: #1678030)
    - SAUCE: apparmor: add information about the query inteface to the feature set

  * change_profile incorrect when using namespaces with a compound stack
    (LP: #1677959)
    - SAUCE: apparmor: fix label parse for stacked labels

  * Zesty update to v4.10.8 stable release (LP: #1678930)
    - xfrm: policy: init locks early
    - xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window
    - xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder
    - KVM: nVMX: Fix nested VPID vmx exec control
    - KVM: x86: cleanup the page tracking SRCU instance
    - virtio_balloon: init 1st buffer in stats vq
    - pinctrl: qcom: Don't clear status bit on irq_unmask
    - c6x/ptrace: Remove useless PTRACE_SETREGSET implementation
    - h8300/ptrace: Fix incorrect register transfer count
    - mips/ptrace: Preserve previous registers for short regset write
    - sparc/ptrace: Preserve previous registers for short regset write
    - metag/ptrace: Preserve previous registers for short regset write
    - metag/ptrace: Provide default TXSTATUS for short NT_PRSTATUS
    - metag/ptrace: Reject partial NT_METAG_RPIPE writes
    - qla2xxx: Allow vref count to timeout on vport delete.
    - sched/rt: Add a missing rescheduling point
    - usb: musb: fix possible spinlock deadlock
    - Linux 4.10.8

  * [Hyper-V] pci-hyperv: Use device serial number as PCI domain (LP: #1667527)
    - net/mlx4_core: Use cq quota in SRIOV when creating completion EQs
    - PCI: hv: Use device serial number as PCI domain

  * Miscellaneous Ubuntu changes
    - [Config] flash-kernel should be a...

Changed in linux (Ubuntu):
status: In Progress → Fix Released
Revision history for this message
Kleber Sacilotto de Souza (kleber-souza) wrote :

This bug is awaiting verification that the kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-trusty' to 'verification-done-trusty'. If the problem still exists, change the tag 'verification-needed-trusty' to 'verification-failed-trusty'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

tags: added: verification-needed-trusty
tags: added: verification-needed-xenial
Revision history for this message
Kleber Sacilotto de Souza (kleber-souza) wrote :

This bug is awaiting verification that the kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-xenial' to 'verification-done-xenial'. If the problem still exists, change the tag 'verification-needed-xenial' to 'verification-failed-xenial'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

tags: added: verification-needed-yakkety
Revision history for this message
Kleber Sacilotto de Souza (kleber-souza) wrote :

This bug is awaiting verification that the kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-yakkety' to 'verification-done-yakkety'. If the problem still exists, change the tag 'verification-needed-yakkety' to 'verification-failed-yakkety'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

Revision history for this message
Colin Ian King (colin-king) wrote :

tested on xenial with the -proposed 4.4.0-74-generic kernel, ran 16 xattr stressors for 5 minutes, no failure, passed.

tags: added: verification-done-xenial
removed: verification-needed-xenial
Revision history for this message
Colin Ian King (colin-king) wrote :

tested on Yakkety with the -proposed 4.8.0-48-geneirc kernel, ran 16 xattr stressors for 5 minutes, no failure, passed.

tags: added: verification-done-yakkety
removed: verification-needed-yakkety
Revision history for this message
Colin Ian King (colin-king) wrote :

tested on Trusty with the -proposed 3.13.0-117-generic and 4.4.0-74-generic #95~14.04.1 HWE kernel, ran 16 xattr stressors for 5 minutes, no failure, passed.

tags: added: verification-done-trusty
removed: verification-needed-trusty
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package linux - 3.13.0-117.164

---------------
linux (3.13.0-117.164) trusty; urgency=low

  * linux: 3.13.0-117.164 -proposed tracker (LP: #1680733)

  * CVE-2017-6353
    - sctp: deny peeloff operation on asocs with threads sleeping on it

  * CVE-2017-5986
    - sctp: avoid BUG_ON on sctp_wait_for_sndbuf

  * Update ENA driver to 1.1.2 from net-next (LP: #1664312)
    - net: ena: Remove unnecessary pci_set_drvdata()
    - net: ena: Fix error return code in ena_device_init()
    - net: ena: change the return type of ena_set_push_mode() to be void.
    - net: ena: use setup_timer() and mod_timer()
    - net/ena: remove ntuple filter support from device feature list
    - net/ena: fix queues number calculation
    - net/ena: fix ethtool RSS flow configuration
    - net/ena: fix RSS default hash configuration
    - net/ena: fix NULL dereference when removing the driver after device reset
      failed
    - net/ena: refactor ena_get_stats64 to be atomic context safe
    - net/ena: fix potential access to freed memory during device reset
    - net/ena: use READ_ONCE to access completion descriptors
    - net/ena: reduce the severity of ena printouts
    - net/ena: change driver's default timeouts
    - net/ena: change condition for host attribute configuration
    - net/ena: update driver version to 1.1.2

  * [Xenial - 16.04 ]Bonding driver - stack corruption when trying to copy 20
    bytes to a sockaddr (LP: #1668042)
    - net/bonding: Enforce active-backup policy for IPoIB bonds

  * stress_smoke_test passing and exiting rc=9 (linux 4.9.0-12.13 ADT test
    failure with linux 4.9.0-12.13) (LP: #1658633)
    - ext4: lock the xattr block before checksuming it

  * vmxnet3 LRO IPv6 performance issues (stalling TCP) (LP: #1605494)
    - Driver: Vmxnet3: set CHECKSUM_UNNECESSARY for IPv6 packets

  * move aufs.ko from -extra to linux-image package (LP: #1673498)
    - [config] aufs.ko moved to linux-image package

  * lsattr 32bit does not work on 64bit kernel (Inappropriate ioctl error)
    (LP: #1619918)
    - btrfs: fix btrfs_compat_ioctl failures on non-compat ioctls

 -- Kleber Sacilotto de Souza <email address hidden> Thu, 06 Apr 2017 17:52:50 +0100

Changed in linux (Ubuntu Trusty):
status: Fix Committed → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (29.1 KiB)

This bug was fixed in the package linux - 4.4.0-75.96

---------------
linux (4.4.0-75.96) xenial; urgency=low

  * linux: 4.4.0-75.96 -proposed tracker (LP: #1684441)

  * [Hyper-V] hv: util: move waiting for release to hv_utils_transport itself
    (LP: #1682561)
    - Drivers: hv: util: move waiting for release to hv_utils_transport itself

linux (4.4.0-74.95) xenial; urgency=low

  * linux: 4.4.0-74.95 -proposed tracker (LP: #1682041)

  * [Hyper-V] hv: vmbus: Raise retry/wait limits in vmbus_post_msg()
    (LP: #1681893)
    - Drivers: hv: vmbus: Raise retry/wait limits in vmbus_post_msg()

linux (4.4.0-73.94) xenial; urgency=low

  * linux: 4.4.0-73.94 -proposed tracker (LP: #1680416)

  * CVE-2017-6353
    - sctp: deny peeloff operation on asocs with threads sleeping on it

  * vfat: missing iso8859-1 charset (LP: #1677230)
    - [Config] NLS_ISO8859_1=y

  * Regression: KVM modules should be on main kernel package (LP: #1678099)
    - [Config] powerpc: Add kvm-hv and kvm-pr to the generic inclusion list

  * linux-lts-xenial 4.4.0-63.84~14.04.2 ADT test failure with linux-lts-xenial
    4.4.0-63.84~14.04.2 (LP: #1664912)
    - SAUCE: apparmor: fix link auditing failure due to, uninitialized var

  * regession tests failing after stackprofile test is run (LP: #1661030)
    - SAUCE: fix regression with domain change in complain mode

  * Permission denied and inconsistent behavior in complain mode with 'ip netns
    list' command (LP: #1648903)
    - SAUCE: fix regression with domain change in complain mode

  * unexpected errno=13 and disconnected path when trying to open /proc/1/ns/mnt
    from a unshared mount namespace (LP: #1656121)
    - SAUCE: apparmor: null profiles should inherit parent control flags

  * apparmor refcount leak of profile namespace when removing profiles
    (LP: #1660849)
    - SAUCE: apparmor: fix ns ref count link when removing profiles from policy

  * tor in lxd: apparmor="DENIED" operation="change_onexec"
    namespace="root//CONTAINERNAME_<var-lib-lxd>" profile="unconfined"
    name="system_tor" (LP: #1648143)
    - SAUCE: apparmor: Fix no_new_privs blocking change_onexec when using stacked
      namespaces

  * apparmor oops in bind_mnt when dev_path lookup fails (LP: #1660840)
    - SAUCE: apparmor: fix oops in bind_mnt when dev_path lookup fails

  * apparmor auditing denied access of special apparmor .null fi\ le
    (LP: #1660836)
    - SAUCE: apparmor: Don't audit denied access of special apparmor .null file

  * apparmor label leak when new label is unused (LP: #1660834)
    - SAUCE: apparmor: fix label leak when new label is unused

  * apparmor reference count bug in label_merge_insert() (LP: #1660833)
    - SAUCE: apparmor: fix reference count bug in label_merge_insert()

  * apparmor's raw_data file in securityfs is sometimes truncated (LP: #1638996)
    - SAUCE: apparmor: fix replacement race in reading rawdata

  * unix domain socket cross permission check failing with nested namespaces
    (LP: #1660832)
    - SAUCE: apparmor: fix cross ns perm of unix domain sockets

  * Xenial update to v4.4.59 stable release (LP: #1678960)
    - xfrm: policy: init locks early
    - virtio_balloon: init ...

Changed in linux (Ubuntu Xenial):
status: Fix Committed → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (14.5 KiB)

This bug was fixed in the package linux - 4.8.0-49.52

---------------
linux (4.8.0-49.52) yakkety; urgency=low

  * linux: 4.8.0-49.52 -proposed tracker (LP: #1684427)

  * [Hyper-V] hv: util: move waiting for release to hv_utils_transport itself
    (LP: #1682561)
    - Drivers: hv: util: move waiting for release to hv_utils_transport itself

linux (4.8.0-48.51) yakkety; urgency=low

  * linux: 4.8.0-48.51 -proposed tracker (LP: #1682034)

  * [Hyper-V] hv: vmbus: Raise retry/wait limits in vmbus_post_msg()
    (LP: #1681893)
    - Drivers: hv: vmbus: Raise retry/wait limits in vmbus_post_msg()

linux (4.8.0-47.50) yakkety; urgency=low

  * linux: 4.8.0-47.50 -proposed tracker (LP: #1679678)

  * CVE-2017-6353
    - sctp: deny peeloff operation on asocs with threads sleeping on it

  * CVE-2017-5986
    - sctp: avoid BUG_ON on sctp_wait_for_sndbuf

  * vfat: missing iso8859-1 charset (LP: #1677230)
    - [Config] NLS_ISO8859_1=y

  * [Hyper-V] pci-hyperv: Use device serial number as PCI domain (LP: #1667527)
    - net/mlx4_core: Use cq quota in SRIOV when creating completion EQs

  * Regression: KVM modules should be on main kernel package (LP: #1678099)
    - [Config] powerpc: Add kvm-hv and kvm-pr to the generic inclusion list

  * linux-lts-xenial 4.4.0-63.84~14.04.2 ADT test failure with linux-lts-xenial
    4.4.0-63.84~14.04.2 (LP: #1664912)
    - SAUCE: apparmor: fix link auditing failure due to, uninitialized var

  * regession tests failing after stackprofile test is run (LP: #1661030)
    - SAUCE: fix regression with domain change in complain mode

  * Permission denied and inconsistent behavior in complain mode with 'ip netns
    list' command (LP: #1648903)
    - SAUCE: fix regression with domain change in complain mode

  * unexpected errno=13 and disconnected path when trying to open /proc/1/ns/mnt
    from a unshared mount namespace (LP: #1656121)
    - SAUCE: apparmor: null profiles should inherit parent control flags

  * apparmor refcount leak of profile namespace when removing profiles
    (LP: #1660849)
    - SAUCE: apparmor: fix ns ref count link when removing profiles from policy

  * tor in lxd: apparmor="DENIED" operation="change_onexec"
    namespace="root//CONTAINERNAME_<var-lib-lxd>" profile="unconfined"
    name="system_tor" (LP: #1648143)
    - SAUCE: apparmor: Fix no_new_privs blocking change_onexec when using stacked
      namespaces

  * apparmor oops in bind_mnt when dev_path lookup fails (LP: #1660840)
    - SAUCE: apparmor: fix oops in bind_mnt when dev_path lookup fails

  * apparmor auditing denied access of special apparmor .null fi\ le
    (LP: #1660836)
    - SAUCE: apparmor: Don't audit denied access of special apparmor .null file

  * apparmor label leak when new label is unused (LP: #1660834)
    - SAUCE: apparmor: fix label leak when new label is unused

  * apparmor reference count bug in label_merge_insert() (LP: #1660833)
    - SAUCE: apparmor: fix reference count bug in label_merge_insert()

  * apparmor's raw_data file in securityfs is sometimes truncated (LP: #1638996)
    - SAUCE: apparmor: fix replacement race in reading rawdata

  * unix domain socket cross permission check failing with n...

Changed in linux (Ubuntu Yakkety):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.