APPLIED: [SRU][N:raspi][O:raspi][PATCH 0/1] On Pi desktop, numerous reports of lack of landlock supported ABI (LP: #2066885)

[Juerg Haefliger]

Applied to N/O:linux-raspi master-next branch.

...Juerg


On Mon, 28 Oct 2024 17:12:15 +0100
Juerg Haefliger <juerg.haefliger at canonical.com> wrote:

> BugLink: https://bugs.launchpad.net/bugs/2066885
> 
> [Impact]
> 
> On the Ubuntu noble desktop for Raspberry Pi, the system journal has numerous of the following entries:
> 
> May 23 10:30:29 kermit tracker-miner-f[11130]: Could not get landlock supported ABI: Operation not supported
> May 23 10:30:29 kermit tracker-miner-f[11130]: Refusing to extract file data since Landlock could not be enabled. Update your kernel to fix this warning.
> 
> These appear to be written every time a file in my home directory is modified. The kernel is the stock noble kernel from linux-raspi, 6.8.0-1004-raspi.
> 
> [Test Case]
> 
> Ubuntu desktop image with tracker-miner should not produce any log entries like the ones above.
> 
> $ sudo dmesg | grep landl
> [    0.002208] LSM: initializing lsm=lockdown,capability,landlock,yama,apparmor,ima,evm
> [    0.002531] landlock: Up and running.
> 
> [Where Problems Could Occur]
> 
> Kernel issues (crashes, stack traces) at boot and/or when userspace invokes the LSM ABI.
> 
> Juerg Haefliger (1):
>   UBUNTU: [Config] raspi: Enable landlock LSM by default
> 
>  debian.raspi/config/annotations | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
> 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20241121/d8f10c3c/attachment-0001.sig>