mbox

[mantic,0/4] apparmor bug fixes 6.5.10.10

Message ID 20231025123130.2751944-1-john.johansen@canonical.com
State New
Headers show

Pull-request

https://git.launchpad.net/~apparmor-dev/apparmor-kernel tags/v6.5-mantic-bug-fixes-10-24

Message

John Johansen Oct. 25, 2023, 12:31 p.m. UTC
The follow are a set of bug fixes for the Mantic kernel.

They are also available by pull request via

The following changes since commit 8ef5689e729f8b6ae6ede111c02edbed304606cb:

  UBUNTU: [Config] CONFIG_DM_VERITY_VERIFY_ROOTHASH_SIG_SECONDARY_KEYRING=y (2023-10-13 15:05:22 +0200)

are available in the Git repository at:

  https://git.launchpad.net/~apparmor-dev/apparmor-kernel tags/v6.5-mantic-bug-fixes-10-24

for you to fetch changes up to f4729509af71c850d5da44afef3d034ab371b99d:

  UBUNTU: SAUCE: apparmor: open userns related sysctl so lxc can check if restriction are in place (2023-10-24 00:56:17 -0700)

----------------------------------------------------------------
John Johansen (4):
      UBUNTU: SAUCE: apparmor: fix oops when racing to retrieve notification
      UBUNTU: SAUCE: apparmor: fix notification header size
      UBUNTU: SAUCE: apparmor: fix request field from a prompt reply that denies all access
      UBUNTU: SAUCE: apparmor: open userns related sysctl so lxc can check if restriction are in place

 security/apparmor/file.c   |  4 +++-
 security/apparmor/lsm.c    | 19 +++++++++++++++----
 security/apparmor/notify.c |  6 ++++--
 3 files changed, 22 insertions(+), 7 deletions(-)



In-Reply-To:

Comments

Tim Gardner Oct. 25, 2023, 1:23 p.m. UTC | #1
On 10/25/23 6:31 AM, John Johansen wrote:
> The follow are a set of bug fixes for the Mantic kernel.
> 
> They are also available by pull request via
> 
> The following changes since commit 8ef5689e729f8b6ae6ede111c02edbed304606cb:
> 
>    UBUNTU: [Config] CONFIG_DM_VERITY_VERIFY_ROOTHASH_SIG_SECONDARY_KEYRING=y (2023-10-13 15:05:22 +0200)
> 
> are available in the Git repository at:
> 
>    https://git.launchpad.net/~apparmor-dev/apparmor-kernel tags/v6.5-mantic-bug-fixes-10-24
> 
> for you to fetch changes up to f4729509af71c850d5da44afef3d034ab371b99d:
> 
>    UBUNTU: SAUCE: apparmor: open userns related sysctl so lxc can check if restriction are in place (2023-10-24 00:56:17 -0700)
> 
> ----------------------------------------------------------------
> John Johansen (4):
>        UBUNTU: SAUCE: apparmor: fix oops when racing to retrieve notification
>        UBUNTU: SAUCE: apparmor: fix notification header size
>        UBUNTU: SAUCE: apparmor: fix request field from a prompt reply that denies all access
>        UBUNTU: SAUCE: apparmor: open userns related sysctl so lxc can check if restriction are in place
> 
>   security/apparmor/file.c   |  4 +++-
>   security/apparmor/lsm.c    | 19 +++++++++++++++----
>   security/apparmor/notify.c |  6 ++++--
>   3 files changed, 22 insertions(+), 7 deletions(-)
> 
> 
> 
> In-Reply-To:
> 
> 
> 
Acked-by: Tim Gardner <tim.gardner@canonical.com>
Stefan Bader Oct. 26, 2023, 4:48 p.m. UTC | #2
On 25.10.23 14:31, John Johansen wrote:
> The follow are a set of bug fixes for the Mantic kernel.
> 
> They are also available by pull request via
> 
> The following changes since commit 8ef5689e729f8b6ae6ede111c02edbed304606cb:
> 
>    UBUNTU: [Config] CONFIG_DM_VERITY_VERIFY_ROOTHASH_SIG_SECONDARY_KEYRING=y (2023-10-13 15:05:22 +0200)
> 
> are available in the Git repository at:
> 
>    https://git.launchpad.net/~apparmor-dev/apparmor-kernel tags/v6.5-mantic-bug-fixes-10-24
> 
> for you to fetch changes up to f4729509af71c850d5da44afef3d034ab371b99d:
> 
>    UBUNTU: SAUCE: apparmor: open userns related sysctl so lxc can check if restriction are in place (2023-10-24 00:56:17 -0700)
> 
> ----------------------------------------------------------------
> John Johansen (4):
>        UBUNTU: SAUCE: apparmor: fix oops when racing to retrieve notification
>        UBUNTU: SAUCE: apparmor: fix notification header size
>        UBUNTU: SAUCE: apparmor: fix request field from a prompt reply that denies all access
>        UBUNTU: SAUCE: apparmor: open userns related sysctl so lxc can check if restriction are in place
> 
>   security/apparmor/file.c   |  4 +++-
>   security/apparmor/lsm.c    | 19 +++++++++++++++----
>   security/apparmor/notify.c |  6 ++++--
>   3 files changed, 22 insertions(+), 7 deletions(-)
> 
> 
> 
> In-Reply-To:
> 
> 
> 
Normally I would prefer not to mix multiple bug reports under one 
submission. One tends to forget about them when applying. In patch #4 I 
might probably put an extra line between the BugLink and the additional 
URL given. Just for simpler reading.

Acked-by: Stefan Bader <stefan.bader@canonical.com>
Roxana Nicolescu Oct. 27, 2023, 12:29 p.m. UTC | #3
On 25/10/2023 14:31, John Johansen wrote:
> The follow are a set of bug fixes for the Mantic kernel.
>
> They are also available by pull request via
>
> The following changes since commit 8ef5689e729f8b6ae6ede111c02edbed304606cb:
>
>    UBUNTU: [Config] CONFIG_DM_VERITY_VERIFY_ROOTHASH_SIG_SECONDARY_KEYRING=y (2023-10-13 15:05:22 +0200)
>
> are available in the Git repository at:
>
>    https://git.launchpad.net/~apparmor-dev/apparmor-kernel tags/v6.5-mantic-bug-fixes-10-24
>
> for you to fetch changes up to f4729509af71c850d5da44afef3d034ab371b99d:
>
>    UBUNTU: SAUCE: apparmor: open userns related sysctl so lxc can check if restriction are in place (2023-10-24 00:56:17 -0700)
>
> ----------------------------------------------------------------
> John Johansen (4):
>        UBUNTU: SAUCE: apparmor: fix oops when racing to retrieve notification
>        UBUNTU: SAUCE: apparmor: fix notification header size
>        UBUNTU: SAUCE: apparmor: fix request field from a prompt reply that denies all access
>        UBUNTU: SAUCE: apparmor: open userns related sysctl so lxc can check if restriction are in place
>
>   security/apparmor/file.c   |  4 +++-
>   security/apparmor/lsm.c    | 19 +++++++++++++++----
>   security/apparmor/notify.c |  6 ++++--
>   3 files changed, 22 insertions(+), 7 deletions(-)
>
>
>
> In-Reply-To:
>
>
>
Applied to mantic:master-next. Thanks!

Roxana