[SRU OEM-6.1 0/1] LP: #1987998

Thadeu Lima de Souza Cascardo cascardo at canonical.com
Tue Jun 13 17:21:11 UTC 2023


[Impact]
This is an old bug that was fixed on Jammy (5.15) and Kinetic (5.19), but
still showed up on 6.0. Adding bpf to the list of security modules cause
the kernel to fail to boot.

[Test case]
Boot with lsm=landlock,lockdown,yama,integrity,apparmor,bpf.

[Potential regression]
System might misbehave because landlock LSM might touch memory it is not
supposed to touch. Other than this general breakage, users that use landlock
might see failures.

Matthew Ruffell (1):
  UBUNTU: SAUCE: LSM: Change Landlock from LSMBLOB_NEEDED to
    LSMBLOB_NOT_NEEDED

 security/landlock/cred.c   | 5 -----
 security/landlock/fs.c     | 5 -----
 security/landlock/ptrace.c | 5 -----
 security/landlock/setup.c  | 5 +++++
 security/landlock/setup.h  | 1 +
 5 files changed, 6 insertions(+), 15 deletions(-)

-- 
2.34.1




More information about the kernel-team mailing list