Confirming on Ubuntu 26.04.1 after a do-release-upgrade from 24.04, inside a Proxmox LXC container (host kernel 7.0.14-20-pve).
Versions: apparmor 5.0.2-0ubuntu1~26.04.1 wireguard-tools 1.0.20250521-1ubuntu1 bash 5.3-2ubuntu1 Observations: - `/usr/bin/wg-quick up wg0` and `wg-quick strip wg0` exit with 139 (SIGSEGV) while parsing the config, before any interface is created. - `bash /usr/bin/wg-quick strip wg0` and a byte-identical copy of the script in /tmp both work -> the crash is bound to the profile attached to /usr/bin/wg-quick. - `apparmor_parser -R /etc/apparmor.d/wg-quick` makes it work. Workaround that keeps the profile enforced, /etc/apparmor.d/local/wg- quick: include <abstractions/bash> file mrix /usr/bin/bash, then `apparmor_parser -r /etc/apparmor.d/wg-quick`. With this, wg-quick up/down and [email protected] work (handshake + traffic verified). The profile should allow the interpreter of its own shebang. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2165046 Title: wg-quick SIGSEGV: shipped AppArmor profile denies mmap of /usr/bin/bash To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/wireguard-tools/+bug/2165046/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
