$ apt policy apparmor
apparmor:
  Installed: 4.1.0~beta5-0ubuntu14.1
  Candidate: 4.1.0~beta5-0ubuntu14.1
  Version table:
 *** 4.1.0~beta5-0ubuntu14.1 100
        100 http://archive.ubuntu.com/ubuntu plucky-proposed/main amd64 Packages
        100 /var/lib/dpkg/status
     4.1.0~beta5-0ubuntu14 500
        500 http://archive.ubuntu.com/ubuntu plucky/main amd64 Packages
$ sysctl kernel.apparmor_restrict_unprivileged_unconfined
kernel.apparmor_restrict_unprivileged_unconfined = 1

`sudo aa-status` includes unprivileged_userns as a loaded profile

$ unshare -U ls /
bin   cdrom  etc   lib    lost+found  mnt  proc  run   snap  swap.img  tmp  var
boot  dev    home  lib64  media       opt  root  sbin  srv   sys       usr

Test plan verification considered successful

** Tags removed: verification-needed verification-needed-plucky
** Tags added: verification-done verification-done-plucky

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2110616

Title:
  apparmor unprivileged_userns profile missing access to /

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2110616/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to