This bug was fixed in the package linux - 4.4.0-70.91
---------------
linux (4.4.0-70.91) xenial; urgency=low
* linux: 4.4.0-70.91 -proposed tracker (LP: #1674938)
* snaps with classic + jailmode confinement started to fail on zesty
(LP: #1666897)
- Revert "UBUNTU: SAUCE: apparmor: fix link auditing failure due to,
uninitialized var"
- Revert "UBUNTU: SAUCE: fix regression with domain change in complain mode"
- Revert "UBUNTU: SAUCE: apparmor: flock mediation is not being enforced on
cache check"
- Revert "UBUNTU: SAUCE: apparmor: null profiles should inherit parent
control
flags"
- Revert "UBUNTU: SAUCE: apparmor: fix ns ref count link when removing
profiles from policy"
- Revert "UBUNTU: SAUCE: apparmor: Fix no_new_privs blocking change_onexec
when using stacked namespaces"
- Revert "UBUNTU: SAUCE: apparmor: fix oops in bind_mnt when dev_path lookup
fails"
- Revert "UBUNTU: SAUCE: apparmor: Don't audit denied access of special
apparmor .null file"
- Revert "UBUNTU: SAUCE: apparmor: fix label leak when new label is unused"
- Revert "UBUNTU: SAUCE: apparmor: fix reference count bug in
label_merge_insert()"
- Revert "UBUNTU: SAUCE: apparmor: fix replacement race in reading rawdata"
- Revert "UBUNTU: SAUCE: apparmor: fix cross ns perm of unix domain sockets"
-- Stefan Bader <stefan.ba...@canonical.com> Wed, 22 Mar 2017 09:28:43
+0100
** Changed in: linux (Ubuntu Xenial)
Status: New => Fix Released
** Changed in: linux (Ubuntu Xenial)
Status: New => Fix Released
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1666897
Title:
snaps with classic + jailmode confinement started to fail on zesty
Status in snapd:
Fix Released
Status in linux package in Ubuntu:
Confirmed
Status in linux source package in Xenial:
Fix Released
Status in linux source package in Yakkety:
Fix Released
Bug description:
We just noticed that zesty stated to fail when a snap using classic
confinement is installed in jailmode.
$ snap install --jailmode --classic python0
$ python0 (doesn't work)
/snap/python0/2/usr/bin/python0: error while loading shared libraries:
libm.so.6: failed to map segment from shared object
And in the system log you can see:
[ 2929.841318] audit: type=1400 audit(1487770576.927:40):
apparmor="DENIED" operation="file_mmap" profile="snap.python0.python0"
name="/snap/core/1264/lib/x86_64-linux-gnu/libm-2.23.so" pid=5235
comm="python0" requested_mask="m" denied_mask="m" fsuid=1000 ouid=0
To manage notifications about this bug go to:
https://bugs.launchpad.net/snapd/+bug/1666897/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
