** CVE removed: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2010-4249
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/581525
Title:
Lucid: system becomes unstable randomly, seems related with
** Tags added: testcase
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/581525
Title:
Lucid: system becomes unstable randomly, seems related with apparmor
To manage notifications about this bug go
This bug was fixed in the package linux - 2.6.32-28.55
---
linux (2.6.32-28.55) lucid-proposed; urgency=low
* Another version bump because of abi check failure
* Tracking Bug
- LP: #699885
linux (2.6.32-28.54) lucid-proposed; urgency=low
* Another version bump because of
I have verified that the proposed kernel catches bad policy loads,
causing them to fail and outputs the expected
AppArmor DFA next/check upper bounds error
message in dmesg.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
** Branch linked: lp:ubuntu/lucid-proposed/linux-ec2
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/581525
Title:
Lucid: system becomes unstable randomly, seems related with apparmor
--
** Tags added: verification-done
** Tags removed: verification-needed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/581525
Title:
Lucid: system becomes unstable randomly, seems related with
Accepted linux into lucid-proposed, the package will build now and be
available in a few hours. Please test and give feedback here. See
https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to
enable and use -proposed. Thank you in advance!
** Changed in: linux (Ubuntu Lucid)
This bug was fixed in the package apparmor - 2.5.1-0ubuntu0.10.04.1
---
apparmor (2.5.1-0ubuntu0.10.04.1) lucid-proposed; urgency=low
* Backport 2.5.1-0ubuntu0.10.10.1 from maverick for userspace tools to work
with newer kernels (LP: #660077)
NOTE: user-tmp now uses 'owner'
Using John's test case 4.1, if in install the
linux-image-generic-lts-backport-maverick without upgrading AppArmor, I can
reproduce the bug easily by just rebooting. The dhclient3, guest-session and
evince profiles all cause errors like this in dmesg:
[5.020139] type=1400
** Tags added: verification-done
** Tags removed: verification-needed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/581525
Title:
Lucid: system becomes unstable randomly, seems related with
Accepted apparmor into lucid-proposed, the package will build now and be
available in a few hours. Please test and give feedback here. See
https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to
enable and use -proposed. Thank you in advance!
** Changed in: apparmor (Ubuntu Lucid)
SRU Justification (apparmor)
1. impact of the bug is medium for stable releases. There are two parts
to this bug: the kernel side OOPSing when a the parser generates invalid
tables, and the parser generating correct tables. The lucid kernel
should receive the fix sometime in the future, but the
** Description changed:
+ SRU Justification (apparmor)
+
+ 1. impact of the bug is medium for stable releases. There are two parts
+ to this bug: the kernel side OOPSing when a the parser generates invalid
+ tables, and the parser generating correct tables. The lucid kernel
+ should receive the
** Changed in: apparmor (Ubuntu Lucid)
Assignee: Kees Cook (kees) = Jamie Strandboge (jdstrand)
--
Lucid: system becomes unstable randomly, seems related with apparmor
https://bugs.launchpad.net/bugs/581525
You received this bug notification because you are a member of Ubuntu
Bugs, which is
** Package changed: linux-meta (Ubuntu) = linux (Ubuntu)
** Also affects: apparmor (Ubuntu Maverick)
Importance: Undecided
Status: Fix Released
** Also affects: linux (Ubuntu Maverick)
Importance: Undecided
Assignee: John Johansen (jjohansen)
Status: In Progress
** Also
** Branch linked: lp:ubuntu/apparmor
--
Lucid: system becomes unstable randomly, seems related with apparmor
https://bugs.launchpad.net/bugs/581525
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
** Changed in: apparmor (Ubuntu)
Status: Fix Committed = Fix Released
--
Lucid: system becomes unstable randomly, seems related with apparmor
https://bugs.launchpad.net/bugs/581525
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
** Changed in: apparmor (Ubuntu)
Status: New = Fix Committed
--
Lucid: system becomes unstable randomly, seems related with apparmor
https://bugs.launchpad.net/bugs/581525
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
Gabriel,
yes the error could actually occur if any profile contained regexs
(firefox), however certain profile patterns would trigger the bug more
than others.
** Also affects: linux-meta (Ubuntu)
Importance: Undecided
Status: New
** Changed in: linux-meta (Ubuntu)
Status: New
Thank you for the fixed kernel. I don't have any special profiles except those
that come with standard packages.
Random, non-contained processes were being killed in aa_dfa_match_len.
dlocate /etc/apparmor |sed 's#:.*##' |uniq
evince
tcpdump
apparmor-profiles
cups
dhcp3-client
gdm-guest-session
Seth, can you turn on AppArmor debugging
as root
echo 1 /sys/module/apparmor/parameters/debug
And see what apparmor outputs to dmesg when you try that
--
Lucid: system becomes unstable randomly, seems related with apparmor
https://bugs.launchpad.net/bugs/581525
You received this bug
Sorry John, even after turning on the debug parameter, I don't get any
messages from AppArmor when trying to start origami.
--
Lucid: system becomes unstable randomly, seems related with apparmor
https://bugs.launchpad.net/bugs/581525
You received this bug notification because you are a member
John, thanks for this updated kernel; I received 39 or so AppArmor DFA
next/check upper bounds error fixed, upgrade user space tools per
/etc/init.d/apparmor reload command.
I was able to re-install my /home/sarnold/Local/io/** profile with no
obvious problems: both the Io interpreter appears to
Alright I have finally got some test kernels up
Lucid
http://kernel.ubuntu.com/~jj/linux-image-2.6.32-24-generic_2.6.32-24.38~jj_amd64.deb
http://kernel.ubuntu.com/~jj/linux-image-2.6.32-24-generic_2.6.32-24.38~jj_i386.deb
Maverick
Thanks John, it seems to work:
...
Jul 10 02:36:38 metalpain-laptop kernel: [ 69.287814] AppArmor DFA next/check
upper bounds error fixed, upgrade user space tools
...
Jul 10 02:36:38 metalpain-laptop kernel: [ 69.292180] type=1505
audit(1278722198.248:54): operation=profile_replace
Alright I think I have finally tracked this one down, and we should have
some packages for testing soon. This is a user space fix to make the
table actually work but will also get a kernel side test to ensure the
table is properly bounded at load time.
What is happening is the created dfa is not
John, great!!! Thank you so much for taking care of this, I am awaiting
for your test packages.
--
Lucid: system becomes unstable randomly, seems related with apparmor
https://bugs.launchpad.net/bugs/581525
You received this bug notification because you are a member of Ubuntu
Bugs, which is
Okay, thank you for the profiles, from what I have been able to gather
replacement maybe involved in triggering this. I will set up a fresh
install and try replicating it again.
Vrexio,
if you could attach your custom profiles that would be helpful.
Seth
The comm output is coming back in
John, my profiles were already attached, please refer to first comment
on the thread.
Cheers,
Vreixo
--
Lucid: system becomes unstable randomly, seems related with apparmor
https://bugs.launchpad.net/bugs/581525
You received this bug notification because you are a member of Ubuntu
Bugs, which
Seth,
this is really distirbing, this is the first I have heard of problems
with children profiles, what problems where you having with child
profiles? Where they problems with enforcement, or problems with the
tools and development?
Also did your problems with the /home/sarnold/Local/Io/**
I just discovered a profile for:
/home/sarnold/Local/Io/**
was being attached to /usr/bin/grotty.
I've also experienced the same issue. Sometimes profiles are attached to
completely different processes.
It seems some kind of bug on profile loading.
I doubt there is a problem with profile
I think there's something broken with regexps in profile names.
mmm, now you are saying this... It might be a problem with profiles that
end with *. I would swear my problems appeared after creating the
/usr/bin/totem* profile... but I don't remember. I will try to test
without it.
--
Lucid:
On Wed, Jun 23, 2010 at 6:39 AM, John Johansen
john.johan...@canonical.com wrote:
this is really distirbing, this is the first I have heard of problems
with children profiles, what problems where you having with child
profiles? Where they problems with enforcement, or problems with the
tools
I triggered this bug again while refining my /etc/init.d/origami
profile. (I am breaking apart the giant profile into one profile with
several child profiles.)
This time, I used /etc/init.d/apparmor restart to recompile and load
policies. I successfully changed policy several times before the
This is the profile I was working on the second time my kernel dumped
stack. (It's not done yet.)
Linux haig 2.6.32-22-generic #36-Ubuntu SMP Thu Jun 3 19:31:57 UTC 2010
x86_64 GNU/Linux
** Attachment added: origami initscript profile
http://launchpadlibrarian.net/50730840/etc.init.d.origami
Vreixo, Johannes, I just discovered a profile for:
/home/sarnold/Local/Io/**
was being attached to /usr/bin/grotty.
I think there's something broken with regexps in profile names. (But my
firefox profile appears to be working fine, and has for .. six weeks?
eight weeks? with the profile name
I'm pretty sure I triggered this bug today:
Jun 20 23:58:04 haig kernel: [18128.952910] type=1505
audit(1277103484.764:181): operation=profile_load pid=19615
name=/home/sarnold/Local/io/build/_build/binaries/io
Jun 20 23:59:06 haig kernel: [18190.703695] type=1505
audit(1277103546.554:182):
I'm suffering this issue continuously, and the stack trace always shows
aa_dfa_match, so I think this is an apparmor bug.
** Package changed: linux (Ubuntu) = apparmor (Ubuntu)
--
Lucid: system becomes unstable randomly, seems related with apparmor
https://bugs.launchpad.net/bugs/581525
You
I'm experiencing the same. Didn't do any config changes for apparmor.
After using the computer some time, suddenly no processes can be spawned
any more, because all fail with a message similar to the one above.
Any hints how this could be debugged?
--
Lucid: system becomes unstable randomly,
** Tags added: kj-triage
--
Lucid: system becomes unstable randomly, seems related with apparmor
https://bugs.launchpad.net/bugs/581525
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
** Attachment added: Non standard profiles I am using
http://launchpadlibrarian.net/4857/apparmor.d.tar.gz
--
Lucid: system becomes unstable randomly, seems related with apparmor
https://bugs.launchpad.net/bugs/581525
You received this bug notification because you are a member of Ubuntu
41 matches
Mail list logo
