[Touch-packages] [Bug 1301224] Re: aa-genprof crashed with TypeError in parse_profile_data(): 'bool' object does not support item assignment

2014-10-15 Thread Steve Beattie
** Changed in: apparmor (Ubuntu) Status: New = Incomplete ** Tags removed: amd64 -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1301224 Title: aa-genprof crashed

[Touch-packages] [Bug 1377140] Re: @{HOME}/.config/mimeapps.list missing in abstraction/freedesktop.org

2014-10-15 Thread Steve Beattie
** Tags removed: amd64 -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1377140 Title: @{HOME}/.config/mimeapps.list missing in abstraction/freedesktop.org Status in

[Touch-packages] [Bug 1375067] Re: Can't open pdf file from webdav share, apparmor denies access to dbus

2014-10-17 Thread Steve Beattie
This was fixed in utopic in apparmor 2.8.98-0ubuntu2; marking closed. (Sorry, I missed the reference to this bug when updating the changelog for that release.) ** Changed in: apparmor (Ubuntu) Status: In Progress = Fix Released -- You received this bug notification because you are a

[Touch-packages] [Bug 1322764] Re: apache2 does not work with shipped profiles

2014-10-17 Thread Steve Beattie
** Changed in: apparmor Status: In Progress = Fix Committed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1322764 Title: apache2 does not work with shipped

[Touch-packages] [Bug 1207424] Re: mod_apparmor should let me use ServerName as default hat name

2014-10-17 Thread Steve Beattie
Apparmor 2.9.0 has been released; closing. ** Changed in: apparmor Status: Fix Committed = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1207424

[Touch-packages] [Bug 1294797] Re: aa-genprof traceback with apparmor 2.8.95

2014-10-17 Thread Steve Beattie
Apparmor 2.9.0 has been released; closing. ** Changed in: apparmor Status: Fix Committed = Fix Released ** Changed in: apparmor (Ubuntu Trusty) Status: Triaged = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is

[Touch-packages] [Bug 1319829] Re: aa-genprof will crash when select scan on Ubuntu 14.04 server

2014-10-17 Thread Steve Beattie
Apparmor 2.9.0 has been released; closing. ** Changed in: apparmor Status: Fix Committed = Fix Released ** Changed in: apparmor (Ubuntu Trusty) Status: Confirmed = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which

[Touch-packages] [Bug 1296218] Re: aa-complain crashed with apparmor.common.AppArmorException in get_profile_flags(): '/etc/apparmor.d/usr.bin.chromium-browser contains no profile'

2014-10-17 Thread Steve Beattie
Apparmor 2.9.0 has been released; closing. ** Changed in: apparmor Status: Fix Committed = Fix Released ** Changed in: apparmor (Ubuntu Trusty) Status: Triaged = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is

[Touch-packages] [Bug 1300316] Re: Python utils lack support for signal rules

2014-10-17 Thread Steve Beattie
Apparmor 2.9.0 has been released; closing. ** Changed in: apparmor Status: Fix Committed = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1300316

[Touch-packages] [Bug 1169881] Re: Please add gnome-gmail to ubuntu-email

2014-10-17 Thread Steve Beattie
Apparmor 2.9.0 has been released; closing. ** Changed in: apparmor Status: Fix Committed = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1169881

[Touch-packages] [Bug 1295346] Re: Python utils lack support for path rules using the file keyword

2014-10-17 Thread Steve Beattie
Apparmor 2.9.0 has been released; closing. ** Changed in: apparmor Status: Fix Committed = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1295346

[Touch-packages] [Bug 1298678] Re: Python utils lack support for pivot_root rules

2014-10-17 Thread Steve Beattie
Apparmor 2.9.0 has been released; closing. ** Changed in: apparmor Status: Fix Committed = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1298678

[Touch-packages] [Bug 1375413] Re: update logparse for all the latest updates

2014-10-17 Thread Steve Beattie
Apparmor 2.9.0 has been released; closing. ** Changed in: apparmor Status: Fix Committed = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1375413

[Touch-packages] [Bug 1243932] Re: aa-logprof: Log contains unknown mode senw

2014-10-17 Thread Steve Beattie
Apparmor 2.9.0 has been released; closing. ** Changed in: apparmor Status: Fix Committed = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1243932

[Touch-packages] [Bug 1294819] Re: Python utils lack support for bare capability rules

2014-10-17 Thread Steve Beattie
Apparmor 2.9.0 has been released; closing. ** Changed in: apparmor Status: Fix Committed = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1294819

[Touch-packages] [Bug 1294825] Re: Python utils lack support for mount rules

2014-10-17 Thread Steve Beattie
Apparmor 2.9.0 has been released; closing. ** Changed in: apparmor Status: Fix Committed = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1294825

[Touch-packages] [Bug 1322764] Re: apache2 does not work with shipped profiles

2014-10-17 Thread Steve Beattie
Apparmor 2.9.0 has been released; closing. ** Changed in: apparmor Status: Fix Committed = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1322764

[Touch-packages] [Bug 1307665] Re: signal entries in audit.log send aa-logprof in infinite loop

2014-10-17 Thread Steve Beattie
Apparmor 2.9.0 has been released; closing. ** Changed in: apparmor Status: Fix Committed = Fix Released ** Changed in: apparmor (Ubuntu Trusty) Status: Triaged = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is

[Touch-packages] [Bug 1325109] Re: Python tools don't understand 'unmount' directive

2014-10-17 Thread Steve Beattie
Apparmor 2.9.0 has been released; closing. ** Changed in: apparmor Status: Fix Committed = Fix Released ** Changed in: apparmor (Ubuntu Trusty) Status: Triaged = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is

[Touch-packages] [Bug 1340927] Re: libapparmor aalogparse memory leak

2014-10-17 Thread Steve Beattie
Apparmor 2.9.0 has been released; closing. ** Changed in: apparmor Status: Fix Committed = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1340927

[Touch-packages] [Bug 228229] Re: sshd profile does not work out-of-the-box

2014-10-17 Thread Steve Beattie
Apparmor 2.9.0 has been released; closing. ** Changed in: apparmor Status: Fix Committed = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/228229

[Touch-packages] [Bug 1231778] Re: wifi not working on Saucy Salamander

2014-10-17 Thread Steve Beattie
Apparmor 2.9.0 has been released; closing. ** Changed in: ac100 Status: New = Fix Released ** Changed in: apparmor Status: Fix Committed = Fix Released ** Changed in: network-manager (Ubuntu) Status: Invalid = Fix Released ** Changed in: network-manager (Ubuntu Saucy)

[Touch-packages] [Bug 950921] Re: aa-enforce and aa-complain strip all flags instead of manipulating 'complain'

2014-10-17 Thread Steve Beattie
Apparmor 2.9.0 has been released; closing. ** Changed in: apparmor Status: Fix Committed = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/950921

[Touch-packages] [Bug 1196880] Re: segfault on aa_getcon with mode = NULL and unreadable /proc/tid/attr/current

2014-10-17 Thread Steve Beattie
Apparmor 2.9.0 has been released; closing. ** Changed in: apparmor Status: Fix Committed = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1196880

[Touch-packages] [Bug 1220861] Re: [REGRESSION] Task based libapparmor getcon functions don't always NUL-terminate con strings properly

2014-10-17 Thread Steve Beattie
Apparmor 2.9.0 has been released; closing. ** Changed in: apparmor Status: Fix Committed = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1220861

[Touch-packages] [Bug 1036393] Re: aa-logprof unusable with latest lxc templates

2014-10-17 Thread Steve Beattie
Apparmor 2.9.0 has been released; closing. ** Changed in: apparmor Status: Fix Committed = Fix Released ** Changed in: apparmor (Ubuntu Precise) Status: Confirmed = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which

[Touch-packages] [Bug 1377140] Re: @{HOME}/.config/mimeapps.list missing in abstraction/freedesktop.org

2014-10-21 Thread Steve Beattie
This was fixed in utopic in apparmor 2.8.98-0ubuntu2; closing. ** Changed in: apparmor (Ubuntu) Status: In Progress = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu.

[Touch-packages] [Bug 1378037] Re: ImportError: cannot import name 'click'

2014-10-24 Thread Steve Beattie
I'm not sure what's going wrong (as I'm not able to reproduce the failure you're seeing), but the click.build module is provided by the python3-click package. click-apparmor depends on click, which depends on python3-click. You might try reinstalling python3-click. -- You received this bug

[Touch-packages] [Bug 1192965] Re: user-mail abstraction refers to /var/spool/mail rather than /var/mail

2014-10-24 Thread Steve Beattie
Actually, this was fixed in ubuntu 14.10 with apparmor 2.8.98-0ubuntu2. Closing. ** Changed in: apparmor (Ubuntu) Status: In Progress = Fix Released ** Changed in: apparmor (Ubuntu) Milestone: ubuntu-15.04 = ubuntu-14.10 -- You received this bug notification because you are a member

[Touch-packages] [Bug 1339727] Re: lightdm xauthority path is wrong

2014-10-02 Thread Steve Beattie
** Changed in: apparmor (Ubuntu) Importance: Undecided = High ** Changed in: apparmor (Ubuntu) Status: Confirmed = In Progress -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu.

[Touch-packages] [Bug 1340927] Re: libapparmor aalogparse memory leak

2014-10-02 Thread Steve Beattie
** Summary changed: - aa-notify memory leak + libapparmor aalogparse memory leak -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1340927 Title: libapparmor aalogparse

[Touch-packages] [Bug 1340927] Re: libapparmor aalogparse memory leak

2014-10-09 Thread Steve Beattie
** Changed in: apparmor/2.8 Status: Fix Committed = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1340927 Title: libapparmor aalogparse memory leak

[Touch-packages] [Bug 1384431] Re: libapparmor's aa_query_label() needs man page documentation

2014-12-17 Thread Steve Beattie
This did not make it into AppArmor 2.9.1, carrying forward to 2.9.2. ** Changed in: apparmor Milestone: 2.9.1 = 2.9.2 -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu.

[Touch-packages] [Bug 451422] Re: cannot override a generic deny rule with a more specific allow rule

2014-12-17 Thread Steve Beattie
** Tags added: aa-feature -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/451422 Title: cannot override a generic deny rule with a more specific allow rule Status in

[Touch-packages] [Bug 1340927] Re: aa-notify memory leak

2014-07-15 Thread Steve Beattie
Commits to address these have been applied to the 2.8 and trunk apparmor branches. The ubuntu packages should also get a fix for this. ** Changed in: apparmor Status: In Progress = Fix Committed ** Changed in: apparmor/2.8 Status: In Progress = Fix Committed ** Also affects:

[Touch-packages] [Bug 1413410] Re: Unable to match embedded NULLs in unix bind rule for abstract sockets

2015-02-03 Thread Steve Beattie
** Also affects: apparmor/2.9 Importance: Undecided Status: New ** Changed in: apparmor/2.9 Status: New = Fix Committed ** Changed in: apparmor/2.9 Importance: Undecided = High ** Changed in: apparmor/2.9 Status: Fix Committed = In Progress ** Changed in:

[Touch-packages] [Bug 1422521] Re: mmap of ...mir/client-platform/mesa.so DENIED

2015-02-17 Thread Steve Beattie
Solution will be to create a new abstractions/mir and have the templates refer to that. ** Also affects: apparmor-easyprof-ubuntu (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is

[Touch-packages] [Bug 1423810] [NEW] [krillin] apparmor fd_inheritance regression test causes kernel to crash

2015-02-19 Thread Steve Beattie
Public bug reported: On krillin with vivid-proposed, running the fd_inheritance test from the apparmor regression tests causes the kernel to crash and spontaneously reboot the device: phablet@ubuntu-phablet:~/src/apparmor-2.9.1/tests/regression/apparmor$ logger running fd_inheritance tests now

[Touch-packages] [Bug 1423810] Re: [krillin] apparmor fd_inheritance regression test causes kernel to crash

2015-02-19 Thread Steve Beattie
And the unix_fd_server test as well: phablet@ubuntu-phablet:~/src/apparmor-2.9.1/tests/regression/apparmor$ sudo sh -c 'VERBOSE=1 bash unix_fd_server.sh' [sudo] password for phablet: ok: fd passing; unconfined - unconfined ok: fd passing; confined - unconfined ok: fd passing; confined (bad perm)

[Touch-packages] [Bug 1423810] Re: [krillin] apparmor fd_inheritance regression test causes kernel to crash

2015-02-19 Thread Steve Beattie
Looks like the socketpair tests cause a similar issue: phablet@ubuntu-phablet:~/src/apparmor-2.9.1/tests/regression/apparmor$ sudo sh -c 'VERBOSE=1 bash socketpair.sh' [sudo] password for phablet: ok: SOCKETPAIR (unconfined) ok: SOCKETPAIR (unconfined bad con) ok: SOCKETPAIR (unconfined bad

[Touch-packages] [Bug 1423810] Re: [krillin] apparmor fd_inheritance regression test causes kernel to crash

2015-02-20 Thread Steve Beattie
... and the unix_socket_unamed test: phablet@ubuntu-phablet:~/src/apparmor-2.9.1/tests/regression/apparmor$ sudo sh -c 'VERBOSE=1 bash unix_socket_unnamed.sh' [sudo] password for phablet: ok: AF_UNIX unnamed socket (stream); unconfined server ok: AF_UNIX unnamed socket (stream); confined server

[Touch-packages] [Bug 1407437] Re: aa-enforce fails with ImportError: No module named rule.capability

2015-01-05 Thread Steve Beattie
) yet. ** Also affects: apparmor Importance: Undecided Status: New ** Changed in: apparmor (Ubuntu) Status: New = Confirmed ** Changed in: apparmor (Ubuntu) Status: Confirmed = New ** Changed in: apparmor Assignee: (unassigned) = Steve Beattie (sbeattie) ** Changed

[Touch-packages] [Bug 1407437] Re: aa-enforce fails with ImportError: No module named rule.capability

2015-01-05 Thread Steve Beattie
Sorry, I was incorrect; this only affects trunk as the apparmor 2.9.x branch does not contain the new rule/ subdirectory. ** Changed in: apparmor Milestone: 2.9.2 = None -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to

[Touch-packages] [Bug 1423810] Re: [krillin] apparmor fd_inheritance regression test causes kernel to crash

2015-02-20 Thread Steve Beattie
While it's not surprising, I've confirmed that this issues affects ubuntu-rtm/14.09 on krillin as well. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1423810 Title:

[Touch-packages] [Bug 1434143] Re: boot script should run aa-profile-hook in addition to aa-clickhook

2015-03-19 Thread Steve Beattie
Per discussion with Jamie on irc, aa-profile-hook is to be triggered when the apparmor package or click-apparmor package (provider of aa- profile-hook) is updated via the system image updater. It is *not* necessary to run aa-profile-hook on updates to apparmor-easyprof-ubuntu and

[Touch-packages] [Bug 1371058] Re: Regression: Latest apt security update returns Hash Sum mismatch for file: URI:s

2015-03-10 Thread Steve Beattie
This was fixed in apt 1.0.9.1ubuntu1, and thus has been addressed for utopic and vivid, so closing. Thanks. ** Changed in: apt (Ubuntu) Status: In Progress = Fix Released ** Changed in: apt (Ubuntu Utopic) Status: In Progress = Fix Released -- You received this bug notification

[Touch-packages] [Bug 1436109] Re: pivot_root regression test fails under systemd

2015-03-24 Thread Steve Beattie
A commit for this issue has been applied upstream: http://bazaar.launchpad.net/~apparmor-dev/apparmor/master/revision/2923 -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu.

[Touch-packages] [Bug 1436109] [NEW] pivot_root regression test fails under systemd

2015-03-24 Thread Steve Beattie
Public bug reported: The pivot_root apparmor regression test fails when systemd is the init daemon: running pivot_root Error: pivot_root failed. Test 'PIVOT_ROOT (unconfined)' was expected to 'pass'. Reason for failure 'FAIL - pivot_root: Invalid argument' Error: pivot_root failed. Test

[Touch-packages] [Bug 1437429] Re: display

2015-03-30 Thread Steve Beattie
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Touch-packages] [Bug 1437847] Re: apport-bug compiz-0.9 i386 trusty ubuntu

2015-03-30 Thread Steve Beattie
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Touch-packages] [Bug 1438156] Re: package libenca0:amd64 1.15-2 failed to install/upgrade: package libenca0:amd64 is already installed and configured

2015-03-30 Thread Steve Beattie
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Touch-packages] [Bug 1438267] Re: package click-apparmor 0.2 failed to install/upgrade: el subproceso script pre-removal nuevo devolvió el código de salida de error 1

2015-03-30 Thread Steve Beattie
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Touch-packages] [Bug 1438035] Re: [Aspire 4736Z, Realtek ALC888, Mic, Internal] No sound at all

2015-03-30 Thread Steve Beattie
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Touch-packages] [Bug 1403468] Re: dnsmasq profile incomplete for lxc usage

2015-03-31 Thread Steve Beattie
** Changed in: apparmor Milestone: None = 2.9.2 -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1403468 Title: dnsmasq profile incomplete for lxc usage Status in

[Touch-packages] [Bug 1432045] Re: pivot_root audit modifier ignored when oldroot and newroot specified

2015-04-01 Thread Steve Beattie
A fix was committed for this in AppArmor upstream in trunk revision 2901 and on the 2.9 branch in revision 2870. ** Changed in: apparmor Status: Confirmed = Fix Committed ** Changed in: apparmor Milestone: None = 2.9.2 -- You received this bug notification because you are a member

[Touch-packages] [Bug 1433829] Re: apparmor fails to compile deny link rules

2015-04-01 Thread Steve Beattie
** Changed in: apparmor Milestone: None = 2.9.2 -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1433829 Title: apparmor fails to compile deny link rules Status in

[Touch-packages] [Bug 1431717] Re: audit qualifier does not become effective

2015-04-01 Thread Steve Beattie
A fix was committed for this in AppArmor upstream in trunk revision 2901 and on the 2.9 branch in revision 2870. ** Changed in: apparmor Milestone: None = 2.9.2 ** Changed in: apparmor Status: Confirmed = Fix Committed ** Changed in: apparmor Importance: Undecided = High -- You

[Touch-packages] [Bug 1422521] Re: mmap of ...mir/client-platform/mesa.so DENIED

2015-03-02 Thread Steve Beattie
Gack, sorry about that. I'm working on fixing it now. Thanks. ** Changed in: apparmor (Ubuntu) Status: Triaged = In Progress -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu.

[Touch-packages] [Bug 1427668] Re: IT SLOWED MY PC

2015-03-03 Thread Steve Beattie
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Touch-packages] [Bug 1100877] Re: lxc-start fails after upgrade to raring

2015-03-04 Thread Steve Beattie
** Tags removed: apparmor -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1100877 Title: lxc-start fails after upgrade to raring Status in lxc package in Ubuntu: Expired

[Touch-packages] [Bug 1310598] Re: AppArmor python tools fail to parse mounts with UTF-8 non-ascii characters

2015-03-03 Thread Steve Beattie
Alain, thanks for the patch. I have committed it to upstream apparmor. ** Also affects: apparmor/2.9 Importance: Undecided Status: New ** Changed in: apparmor/2.9 Importance: Undecided = Medium ** Changed in: apparmor/2.9 Status: New = Fix Committed ** Changed in:

[Touch-packages] [Bug 1424143] Re: lxc-net should attempt to use ip before ifconfig, not vice-versa

2015-02-21 Thread Steve Beattie
Here's the complete sh -xe output from running lxc-net start: ubuntu@vivid-i386:~$ sudo sh -xe /usr/lib/i386-linux-gnu/lxc/lxc-net start + distrosysconfdir=/etc/default + localstatedir=/var + varrun=/run/lxc + USE_LXC_BRIDGE=true + LXC_BRIDGE=lxcbr0 + LXC_ADDR=10.0.3.1 + LXC_NETMASK=255.255.255.0

[Touch-packages] [Bug 1424143] [NEW] lxc-net should attempt to use ip before ifconfig, not vice-versa

2015-02-21 Thread Steve Beattie
Public bug reported: The lxc-net script in /usr/lib/$archtriplet/lxc/lxc-net attempts to use ifconfig first and then falls back to trying to use ip(8) in the ifup() and ifdown() shell functions. This behavior should be reversed, as ip has been preferred over ifconfig for several years now. As an

[Touch-packages] [Bug 1424154] [NEW] apparmor sysfs remount rejection on lxc-start

2015-02-21 Thread Steve Beattie
Public bug reported: When starting up an ubuntu lxc container in vivid, I'm seeing the following apparmor rejection: Feb 21 01:30:41 vivid-i386 kernel: [ 2121.606513] audit: type=1400 audit(1424511041.643:125): apparmor=DENIED operation=mount info=failed flags match error=-13

[Touch-packages] [Bug 1424143] Re: lxc-net should attempt to use ip before ifconfig, not vice-versa

2015-02-21 Thread Steve Beattie
And here's the patch to the lxc-net script to prefer ip(8) over ifconfig. ** Patch added: lxc-net-prefer_ip.patch https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1424143/+attachment/4323815/+files/lxc-net-prefer_ip.patch -- You received this bug notification because you are a member of

[Touch-packages] [Bug 1424154] Re: apparmor sysfs remount rejection on lxc-start

2015-02-21 Thread Steve Beattie
So the only difference that I can see is that so *without* the added remount rule, /proc/mounts contains the following entries for sysfs+/sys/ within the container: sysfs /sys sysfs rw,nosuid,nodev,noexec,relatime 0 0 sysfs /sys sysfs ro,nosuid,nodev,noexec,relatime 0 0 with the added rule,

[Touch-packages] [Bug 1435452] Re: dh_apparmor has no dh sequencer support

2015-03-23 Thread Steve Beattie
Hey Robie, I'm not particularly clueful when it comes to debhelper, but I don't really see how to accomplish this given what knowledge dh_apparmor has/doesn't have. It needs to know what profile(s) to create a local file for, as well as to reload; this is why the --profile-name argument is

[Touch-packages] [Bug 1435452] Re: dh_apparmor has no dh sequencer support

2015-03-23 Thread Steve Beattie
To clarify, I mean that the existing dh_apparmor needs to be passed the profile name and potentially the package name as well as it has no means currently of discerning what those might be, which means there's no current way to get around requiring the packager to manually add the dh_apparmor call

[Touch-packages] [Bug 1434143] Re: boot script should run aa-profile-hook in addition to aa-clickhook

2015-03-23 Thread Steve Beattie
Thanks, I've updated the apparmor-ubuntu-citrain branch to do that. Test packages are building in https://launchpad.net/~ubuntu-security- proposed/+archive/ubuntu/ppa and will test the changes once they're built. -- You received this bug notification because you are a member of Ubuntu Touch

[Touch-packages] [Bug 1407437] Re: aa-enforce fails with ImportError: No module named rule.capability

2015-01-13 Thread Steve Beattie
** Changed in: apparmor Status: Triaged = Fix Committed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1407437 Title: aa-enforce fails with ImportError: No module

[Touch-packages] [Bug 1434018] Re: change_profile doesn't work with audit or deny qualifiers

2015-03-23 Thread Steve Beattie
** Also affects: apparmor Importance: Undecided Status: New ** Changed in: apparmor Status: New = Confirmed ** Changed in: apparmor Importance: Undecided = Low ** Tags added: aa-parser -- You received this bug notification because you are a member of Ubuntu Touch seeded

[Touch-packages] [Bug 1432045] Re: pivot_root audit modifier ignored when oldroot and newroot specified

2015-03-23 Thread Steve Beattie
** Also affects: apparmor (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1432045 Title: pivot_root audit modifier

[Touch-packages] [Bug 1431717] Re: audit qualifier does not become effective

2015-03-23 Thread Steve Beattie
** Also affects: apparmor (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1431717 Title: audit qualifier does not

[Touch-packages] [Bug 1439859] Re: Bug on the screen

2015-04-02 Thread Steve Beattie
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Touch-packages] [Bug 1437686] Re: NTP connects any 3 min and never stops

2015-04-03 Thread Steve Beattie
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Touch-packages] [Bug 1243932] Re: aa-logprof: Log contains unknown mode senw

2015-04-23 Thread Steve Beattie
** Changed in: apparmor Status: Fix Committed = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1243932 Title: aa-logprof: Log contains unknown mode

[Touch-packages] [Bug 1378095] Re: aa-complain traceback when marking multiple profiles

2015-04-23 Thread Steve Beattie
** Changed in: apparmor/2.9 Status: Fix Committed = Fix Released ** Changed in: apparmor/master Status: Fix Committed = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu.

[Touch-packages] [Bug 1310598] Re: AppArmor python tools fail to parse mounts with UTF-8 non-ascii characters

2015-04-23 Thread Steve Beattie
** Changed in: apparmor/2.9 Status: Fix Committed = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1310598 Title: AppArmor python tools fail to parse

[Touch-packages] [Bug 1422521] Re: mmap of ...mir/client-platform/mesa.so DENIED

2015-04-23 Thread Steve Beattie
** Changed in: apparmor Status: Fix Committed = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1422521 Title: mmap of ...mir/client-platform/mesa.so

[Touch-packages] [Bug 1403468] Re: dnsmasq profile incomplete for lxc usage

2015-04-23 Thread Steve Beattie
** Changed in: apparmor Status: Fix Committed = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1403468 Title: dnsmasq profile incomplete for lxc

[Touch-packages] [Bug 1432045] Re: pivot_root audit modifier ignored when oldroot and newroot specified

2015-04-23 Thread Steve Beattie
** Changed in: apparmor Status: Fix Committed = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1432045 Title: pivot_root audit modifier ignored when

[Touch-packages] [Bug 1433829] Re: apparmor fails to compile deny link rules

2015-04-23 Thread Steve Beattie
** Changed in: apparmor Status: Fix Committed = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1433829 Title: apparmor fails to compile deny link

[Touch-packages] [Bug 1407437] Re: aa-enforce fails with ImportError: No module named rule.capability

2015-04-24 Thread Steve Beattie
This was fixed on trunk, closing. ** Changed in: apparmor Status: Fix Committed = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1407437 Title:

[Touch-packages] [Bug 1425398] Re: Apparmor uses rsyslogd profile for different processes - utopic HWE

2015-04-25 Thread Steve Beattie
John, what changes are needed kernel side to address this issue? Attached is a debdiff to address the rsyslog policy side of things. ** Patch added: rsyslog_7.4.4-1ubuntu2.6.debdiff

[Touch-packages] [Bug 1413232] Re: [systemd] dhclient causes apparmor warnings against /run/systemd/journal/dev-log

2015-04-23 Thread Steve Beattie
** Changed in: apparmor Status: Fix Committed = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1413232 Title: [systemd] dhclient causes apparmor

[Touch-packages] [Bug 1431717] Re: audit qualifier does not become effective

2015-04-23 Thread Steve Beattie
** Changed in: apparmor Status: Fix Committed = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1431717 Title: audit qualifier does not become

[Touch-packages] [Bug 1413410] Re: Unable to match embedded NULLs in unix bind rule for abstract sockets

2015-04-23 Thread Steve Beattie
This did not get addressed in the 2.9.2 release, moving to the 2.9.3 milestone. ** Changed in: apparmor/2.9 Milestone: 2.9.2 = 2.9.3 -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu.

[Touch-packages] [Bug 1384431] Re: libapparmor's aa_query_label() needs man page documentation

2015-04-23 Thread Steve Beattie
This did not get addressed in the 2.9.2 release, moving to the 2.9.3 milestone. ** Changed in: apparmor Milestone: 2.9.2 = 2.9.3 -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu.

[Touch-packages] [Bug 1432126] Re: Evince denied from opening

2015-04-24 Thread Steve Beattie
This was fixed in upstream apparmor in the 2.9.2 release, closing there. ** Changed in: apparmor Status: Fix Committed = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu.

[Touch-packages] [Bug 1445219] Re: aa-logprof hangs indefinitely in Ubuntu 14.04 LTS

2015-04-28 Thread Steve Beattie
*** This bug is a duplicate of bug 1307665 *** https://bugs.launchpad.net/bugs/1307665 ** This bug has been marked a duplicate of bug 1307665 signal entries in audit.log send aa-logprof in infinite loop -- You received this bug notification because you are a member of Ubuntu Touch seeded

[Touch-packages] [Bug 1403197] Re: aa-complain crashed with apparmor.common.AppArmorException in store_list_var(): 'An existing variable redefined: @{MOZ_LIBDIR}'

2015-04-28 Thread Steve Beattie
*** This bug is a duplicate of bug 1378095 *** https://bugs.launchpad.net/bugs/1378095 Hi, thanks for reporting this issue, it's a duplicate of bug 1378095. ** Information type changed from Private to Public ** This bug has been marked a duplicate of bug 1378095 aa-complain traceback

[Touch-packages] [Bug 1449763] Re: package libc-dev-bin 2.19-0ubuntu6.6 failed to install/upgrade: package libc-dev-bin is not ready for configuration cannot configure (current status `half-installed'

2015-04-28 Thread Steve Beattie
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Touch-packages] [Bug 1449769] [NEW] Update apparmor python utils to 2.9.2 version in trusty

2015-04-28 Thread Steve Beattie
Public bug reported: Update the python apparmor utils in 14.04 to the version in the upstream 2.9.2 release. Leading up to the release of 14.04, we decided to pull in a pre-release version of the python utils, because we did not want to continue supporting the out of date perl tools for the 5

[Touch-packages] [Bug 1449974] Re: package ca-certificates 20141019ubuntu0.15.04.1 failed to install/upgrade: subprocess installed post-installation script returned error exit status 128

2015-04-29 Thread Steve Beattie
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Touch-packages] [Bug 1450871] Re: xserver crashes ATI AMD Radeon 7700 driver 12.20

2015-05-01 Thread Steve Beattie
** Package changed: openssh (Ubuntu) = xorg (Ubuntu) -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to xorg in Ubuntu. https://bugs.launchpad.net/bugs/1450871 Title: xserver crashes ATI AMD Radeon 7700 driver 12.20 Status

[Touch-packages] [Bug 1450911] Re: Xorg freeze

2015-05-01 Thread Steve Beattie
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Touch-packages] [Bug 1448663] Re: Wrong version format of ca-certificates package in Vivid - need manual actions after upgrade from Utopic

2015-04-28 Thread Steve Beattie
** Changed in: ca-certificates (Ubuntu) Status: Confirmed = Triaged ** Changed in: ca-certificates (Ubuntu) Importance: Undecided = High ** Changed in: ca-certificates (Ubuntu) Assignee: (unassigned) = Marc Deslauriers (mdeslaur) -- You received this bug notification because you

[Touch-packages] [Bug 1449364] Re: remote take over of any computer or o.s. + denial of service

2015-04-28 Thread Steve Beattie
Thanks for your comments. This does not appear to be a bug report and we are closing it. We appreciate the difficulties you are facing, but it would make more sense to raise your question in the support tracker. Please visit https://answers.launchpad.net/ubuntu/+addquestion ** Information type

[Touch-packages] [Bug 1449365] Re: remote take over of any computer or o.s. + denial of service

2015-04-28 Thread Steve Beattie
Thanks for your comments. This does not appear to be a bug report and we are closing it. We appreciate the difficulties you are facing, but it would make more sense to raise your question in the support tracker. Please visit https://answers.launchpad.net/ubuntu/+addquestion ** Information type

[Touch-packages] [Bug 1448797] Re: Grpahic issue

2015-04-27 Thread Steve Beattie
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

  1   2   3   4   5   >