Public bug reported:
When a feature abi that does not support network rules is loaded into a
kernel that does, the policy is incorrectly enforced resulting in
network denials.
The kernel should be correctly enforcing the feature abi by not applying
the network mediation that is explicitly not supported by the specified
feature abi.
** Affects: apparmor (Ubuntu)
Importance: Undecided
Status: New
** Affects: apparmor (Ubuntu Trusty)
Importance: Undecided
Status: New
** Affects: apparmor (Ubuntu Xenial)
Importance: Undecided
Status: New
** Affects: apparmor (Ubuntu Zesty)
Importance: Undecided
Status: New
** Affects: apparmor (Ubuntu Artful)
Importance: Undecided
Status: New
** Also affects: apparmor (Ubuntu Artful)
Importance: Undecided
Status: New
** Also affects: apparmor (Ubuntu Trusty)
Importance: Undecided
Status: New
** Also affects: apparmor (Ubuntu Zesty)
Importance: Undecided
Status: New
** Also affects: apparmor (Ubuntu Xenial)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1728123
Title:
network rules for policy versions that don't support network rules are
broken
Status in apparmor package in Ubuntu:
New
Status in apparmor source package in Trusty:
New
Status in apparmor source package in Xenial:
New
Status in apparmor source package in Zesty:
New
Status in apparmor source package in Artful:
New
Bug description:
When a feature abi that does not support network rules is loaded into
a kernel that does, the policy is incorrectly enforced resulting in
network denials.
The kernel should be correctly enforcing the feature abi by not
applying the network mediation that is explicitly not supported by the
specified feature abi.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1728123/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp