[Bug 1215386] [NEW] lxc-start tries to change apparmor profile to unconfined

Andre Nathan andre at digirati.com.br
Thu Aug 22 11:40:22 UTC 2013


Public bug reported:

When starting a container that has 'lxc.aa_profile = unconfined' on its
configuration file, lxc-start fails with

  lxc-start: Read-only file system - failed to change apparmor profile
to unconfined

This happens because the buffer used by lxc-start to read the process'
apparmor profile from /proc/<PID>/attr/current is not properly NULL-
terminated. A patch for this has been applied upstream and is available
at
https://github.com/lxc/lxc/commit/626ad11bfee3e12e675f51e92920030a6f383b19

Ubuntu Release: Ubuntu 13.04
lxc package version: 0.9.0-0ubuntu3.4

** Affects: lxc (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: lxc

** Tags added: lxc

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to lxc in Ubuntu.
https://bugs.launchpad.net/bugs/1215386

Title:
  lxc-start tries to change apparmor profile to unconfined

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1215386/+subscriptions



More information about the Ubuntu-server-bugs mailing list