Public bug reported: When running the kernel security tests from qa-regression-testing, it fails to run 'sudo -u <user> cat /sys/module/<module>/sections/.text', because it's now only owner-readable, instead of world-readable.
The failure is copied below. This has been changes on 4.15-rc1 by commit 277642dcca765a1955d4c753a5a315ff7f2eb09d ("modules: make sysfs attribute files readable by owner only"). We either want to revert that upstream or fix the test. ====================================================================== FAIL: test_095_kernel_symbols_missing (__main__.KernelSecurityTest) kernel addresses in kallsyms and modules are zeroed out ---------------------------------------------------------------------- Traceback (most recent call last): File "./test-kernel-security.py", line 1508, in test_095_kernel_symbols_missing self._check_pK_files(expected) File "./test-kernel-security.py", line 1449, in _check_pK_files expected) File "./test-kernel-security.py", line 1387, in _read_twice self.assertEqual(rc, 0, regular) AssertionError: cat: /sys/module/virtio_blk/sections/.text: Permission denied ---------------------------------------------------------------------- Ran 76 tests in 22.227s FAILED (failures=1) END ERROR ubuntu_qrt_kernel_security.test-kernel-security.py ubuntu_qrt_kernel_security.test-kernel-security.py timestamp=1521472107 localtime=Mar 19 15:08:27 ** Affects: linux (Ubuntu) Importance: Undecided Assignee: Canonical Kernel Team (canonical-kernel-team) Status: Confirmed ** Changed in: linux (Ubuntu) Status: New => Confirmed ** Changed in: linux (Ubuntu) Assignee: (unassigned) => Canonical Kernel Team (canonical-kernel-team) -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1756963 Title: /sys/module/<module>/sections/.text is now 0400 instead of 0444 Status in linux package in Ubuntu: Confirmed Bug description: When running the kernel security tests from qa-regression-testing, it fails to run 'sudo -u <user> cat /sys/module/<module>/sections/.text', because it's now only owner- readable, instead of world-readable. The failure is copied below. This has been changes on 4.15-rc1 by commit 277642dcca765a1955d4c753a5a315ff7f2eb09d ("modules: make sysfs attribute files readable by owner only"). We either want to revert that upstream or fix the test. ====================================================================== FAIL: test_095_kernel_symbols_missing (__main__.KernelSecurityTest) kernel addresses in kallsyms and modules are zeroed out ---------------------------------------------------------------------- Traceback (most recent call last): File "./test-kernel-security.py", line 1508, in test_095_kernel_symbols_missing self._check_pK_files(expected) File "./test-kernel-security.py", line 1449, in _check_pK_files expected) File "./test-kernel-security.py", line 1387, in _read_twice self.assertEqual(rc, 0, regular) AssertionError: cat: /sys/module/virtio_blk/sections/.text: Permission denied ---------------------------------------------------------------------- Ran 76 tests in 22.227s FAILED (failures=1) END ERROR ubuntu_qrt_kernel_security.test-kernel-security.py ubuntu_qrt_kernel_security.test-kernel-security.py timestamp=1521472107 localtime=Mar 19 15:08:27 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1756963/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp