APPLIED Re: [SRU OEM-6.1 0/1] LP: #1987998

Timo Aaltonen tjaalton at ubuntu.com
Tue Jun 20 12:30:38 UTC 2023


Thadeu Lima de Souza Cascardo kirjoitti 13.6.2023 klo 20.21:
> [Impact]
> This is an old bug that was fixed on Jammy (5.15) and Kinetic (5.19), but
> still showed up on 6.0. Adding bpf to the list of security modules cause
> the kernel to fail to boot.
> 
> [Test case]
> Boot with lsm=landlock,lockdown,yama,integrity,apparmor,bpf.
> 
> [Potential regression]
> System might misbehave because landlock LSM might touch memory it is not
> supposed to touch. Other than this general breakage, users that use landlock
> might see failures.
> 
> Matthew Ruffell (1):
>    UBUNTU: SAUCE: LSM: Change Landlock from LSMBLOB_NEEDED to
>      LSMBLOB_NOT_NEEDED
> 
>   security/landlock/cred.c   | 5 -----
>   security/landlock/fs.c     | 5 -----
>   security/landlock/ptrace.c | 5 -----
>   security/landlock/setup.c  | 5 +++++
>   security/landlock/setup.h  | 1 +
>   5 files changed, 6 insertions(+), 15 deletions(-)
> 

applied to oem-6.1, thanks

-- 
t




More information about the kernel-team mailing list