Verification success for Resolute following the SRU test plan:

Without `-proposed`:
```
root@resolute-vm:~# apt-cache policy auditd
auditd:
  Installed: 1:4.1.2-1build1
  Candidate: 1:4.1.2-1build1
  Version table:
 *** 1:4.1.2-1build1 500
        500 http://archive.ubuntu.com/ubuntu resolute/main amd64 Packages
        100 /var/lib/dpkg/status
root@resolute-vm:~# aa-exec --profile=lsb_release bash
bash: /etc/bash.bashrc: Permission denied
bash: /root/.bashrc: Permission denied
bash-5.3# 
exit
root@resolute-vm:~# ausearch --message AVC
<no matches>
root@resolute-vm:~# 
```

With `-proposed`:
```
root@resolute-vm:~# apt-cache policy auditd
auditd:
  Installed: 1:4.1.2-1ubuntu0.1
  Candidate: 1:4.1.2-1ubuntu0.1
  Version table:
 *** 1:4.1.2-1ubuntu0.1 100
        100 http://archive.ubuntu.com/ubuntu resolute-proposed/main amd64 
Packages
        100 /var/lib/dpkg/status
     1:4.1.2-1build1 500
        500 http://archive.ubuntu.com/ubuntu resolute/main amd64 Packages
root@resolute-vm:~# aa-exec --profile=lsb_release bash
bash: /etc/bash.bashrc: Permission denied
bash: /root/.bashrc: Permission denied
bash-5.3# 
exit
root@resolute-vm:~# ausearch --message AVC
----
time->Tue Aug 25 15:08:07 2026
type=PROCTITLE msg=audit(1787670487.323:6): 
proctitle=2F7362696E2F61707061726D6F725F706172736572002D2D77726974652D6361636865002D2D7265706C616365002D2D002F6574632F61707061726D6F722E64
type=SYSCALL msg=audit(1787670487.323:6): arch=c000003e syscall=1 success=yes 
exit=6201 a0=6 a1=6352517835e8 a2=2a3 a3=0 items=0 ppid=489 pid=518 
auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 
tty=(none) ses=4294967295 comm="apparmor_parser" 
exe="/usr/sbin/apparmor_parser" subj=unconfined key=(null)
type=AVC msg=audit(1787670487.323:6): apparmor="STATUS" 
operation="profile_load" profile="unconfined" name="QtWebEngineProcess" pid=518 
comm="apparmor_parser"
----
...
----
time->Tue Aug 25 17:36:05 2026
type=PROCTITLE msg=audit(1787679365.759:370): proctitle="bash"
type=SYSCALL msg=audit(1787679365.759:370): arch=c000003e syscall=257 
success=no exit=-13 a0=ffffffffffffff9c a1=5732f80aab20 a2=0 a3=0 items=0 
ppid=901 pid=1699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 
sgid=0 fsgid=0 tty=pts0 ses=4294967295 comm="bash" exe="/usr/bin/bash" 
subj=lsb_release key=(null)
type=AVC msg=audit(1787679365.759:370): apparmor="DENIED" operation="open" 
class="file" profile="lsb_release" name="/etc/inputrc" pid=1699 comm="bash" 
requested_mask="r" denied_mask="r" fsuid=0 ouid=0
root@resolute-vm:~# 
```

** Tags removed: verification-needed-resolute
** Tags added: verification-done-resolute

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1117804

Title:
  ausearch doesn't show AppArmor denial messages

To manage notifications about this bug go to:
https://bugs.launchpad.net/apparmor/+bug/1117804/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to