UN-APPLIED[L]: NACK/Cmnt: [Lunar][PULL] apparmor fixes

John Johansen john.johansen at canonical.com
Thu Apr 27 12:56:12 UTC 2023


On 4/27/23 05:54, Andrea Righi wrote:
> On Thu, Apr 27, 2023 at 02:37:21PM +0200, Stefan Bader wrote:
>> On 27.04.23 14:21, John Johansen wrote:
>>> The following changes since commit
>>> e182447c03d5025ced03573df8f937d4e5184a8c:
>>>
>>>     UBUNTU: [Packaging] debian/rules: Add DKMS info to 'printenv' output
>>> (2023-04-24 16:07:07 +0200)
>>>
>>> are available in the Git repository at:
>>>
>>>     git at gitlab.com:jjohansen/apparmor-kernel.git lunar-fixes
>>>
>>> for you to fetch changes up to 871f2d6ed009718bfeb3b649d9d11663a5df23fb:
>>>
>>>     UBUNTU: SAUCE: apparmor: fix: kzalloc perms tables for shared dfas
>>> (2023-04-27 05:17:26 -0700)
>>>
>>> ----------------------------------------------------------------
>>> John Johansen (4):
>>>         UBUNTU: SAUCE: apparmor: fix policy_compat perms remap for file dfa
>>>         UBUNTU: SAUCE: apparmor: fix profile verification and enable it
>>>         UBUNTU: SAUCE: apparmor: fix: add missing failure check in
>>> compute_xmatch_perms
>>>         UBUNTU: SAUCE: apparmor: fix: kzalloc perms tables for shared dfas
>>>
>>>    security/apparmor/apparmorfs.c    |  2 +-
>>>    security/apparmor/policy.c        | 13 +++++++
>>>    security/apparmor/policy_compat.c | 20 +++++++----
>>>    security/apparmor/policy_unpack.c | 72
>>> ++++++++++++++++++++++++---------------
>>>    4 files changed, 72 insertions(+), 35 deletions(-)
>>>
>>>
>>
>> Rejected for the following reasons:
>> - Lunar has released and now is under SRU rules
>> - I cannot figure out this request has an associated LP bug because
>> - the gitlab URI given does not work
>> - SAUCE patches should have some more justification as to why we
>>    have to differ from upstream
>>
>> -Stefan
> 
> These are definitely valid reasons, I was still considering lunar/linux
> as devel material, but at this point it's more stable material, so
> patches should follow the SRU rules. My bad, sorry.
> 
> I've un-applied them from lunar. I'll take care of creating a proper
> LP bug for these extra fixes.
> 
Andrea, I am working on it

> For the apparmor SAUCE patches in general, it'd be nice to have a
> description (even a short summary) of the differences from upstream and
> why/what is using these features (this is probably for John, because I
> don't have a view of the big picture regarding our SAUCE differences).
> 

Ack, will do.





More information about the kernel-team mailing list