ACK: [SRU][N:raspi][O:raspi][PATCH 0/1] On Pi desktop, numerous reports of lack of landlock supported ABI (LP: #2066885)

[Agathe Porte]

2024-10-28 17:13 CET, Juerg Haefliger:
> BugLink: https://bugs.launchpad.net/bugs/2066885
> 
> [Impact]
> 
> On the Ubuntu noble desktop for Raspberry Pi, the system journal has numerous of the following entries:
> 
> May 23 10:30:29 kermit tracker-miner-f[11130]: Could not get landlock supported ABI: Operation not supported
> May 23 10:30:29 kermit tracker-miner-f[11130]: Refusing to extract file data since Landlock could not be enabled. Update your kernel to fix this warning.
> 
> These appear to be written every time a file in my home directory is modified. The kernel is the stock noble kernel from linux-raspi, 6.8.0-1004-raspi.
> 
> [Test Case]
> 
> Ubuntu desktop image with tracker-miner should not produce any log entries like the ones above.
> 
> $ sudo dmesg | grep landl
> [    0.002208] LSM: initializing lsm=lockdown,capability,landlock,yama,apparmor,ima,evm
> [    0.002531] landlock: Up and running.
> 
> [Where Problems Could Occur]
> 
> Kernel issues (crashes, stack traces) at boot and/or when userspace invokes the LSM ABI.
> 
> Juerg Haefliger (1):
>   UBUNTU: [Config] raspi: Enable landlock LSM by default
> 
>  debian.raspi/config/annotations | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)

Acked-by: Agathe Porte <agathe.porte at canonical.com>