On 2/19/26 07:53, A wrote:
>> there was a patch submitted to the kernel-team ml last Thu/Fri,
> applied to git now
> 
> Can you give a link ?
https://code.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/resolute

ba29b25145d2 UBUNTU: SAUCE: apparmor: fix aa_label_sk_perm to check for
RULE_MEDIATES_NET


> Maybe can make some workaround for now (like rule for apparmor)
> 

there are a few work arounds

- boot into a 6.18 kernel

- put the profile into complain mode, or snap devmode

- change the abi in the snap profile in /var/lib/snap/apparmor/profiles

   from
      abi <abi/4.0>

   to
      abi <abi/4.0-ipt>
   or
      abi <abi/5.0>

if neither of those files exist (they are in /etc/apparmor.d/abi/) you
can grab them from

https://gitlab.com/apparmor/apparmor/-/tree/master/profiles/apparmor.d/abi?ref_type=heads

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2141298

Title:
  AppArmor blocks write(2) to network sockets with Linux 6.19

To manage notifications about this bug go to:
https://bugs.launchpad.net/snapd/+bug/2141298/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to