[Bug 668479] Re: [SRU] AppArmor on Hardy Interferes with glibc Access to /proc/self/maps

[Marc Deslauriers]

Thanks for the debdiff!

SRU Request:

Impact: The Apparmor profile in hardy lacks the necessary permissions
for segfault handlers which results in difficulties when trying to see
why certain applications have failed.

This has been addressed in the attached debdiff by adding the same
apparmor rule that was added to later Ubuntu releases.


** Patch added: "debdiff that fixes the issue"
   https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/668479/+attachment/1742532/+files/apparmor_2.1%2B1075-0ubuntu9.3.debdiff

-- 
[SRU] AppArmor on Hardy Interferes with glibc Access to /proc/self/maps
https://bugs.launchpad.net/bugs/668479
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is a direct subscriber.

Status in “apparmor” package in Ubuntu: Fix Released
Status in “apparmor” source package in Hardy: Triaged

Bug description:
Binary package hint: apparmor

Impact: Lack of a single AppArmor base profile rule renders glibc unable to perform functions on Hardy that are available on Lucid.
Addressed: apparmor 2.5-0ubuntu3 (on Lucid) possibly earlier too.
Patch: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/668479/+attachment/1716210/+files/apparmor_2.1%2B1075-0ubuntu9.3.debdiff
Reproducing: trapping a segfault fails; see http://ubuntuforums.org/showthread.php?p=10043474
Regression potential: none known

Attempt to catch a SIGSEGV inside OpenLDAP on Hardy results in an AppArmor error message instead:

2010-09-28T16:41:23-04:00 molybdenum kernel 05 [kern.notice] kernel: [15908266.232011]
 audit(1285706483.638:69): type=1503 operation="inode_permission" requested_mask="::r"
 denied_mask="::r" name="/proc/22022/maps" pid=22038 profile="/usr/sbin/slapd"
 namespace="default"

ProblemType: Bug
Architecture: amd64
Date: Fri Oct 29 14:48:20 2010
DistroRelease: Ubuntu 8.04
Package: apparmor 2.1+1075-0ubuntu9.2
PackageArchitecture: amd64
ProcEnviron:
 PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games
 LANG=en_US.UTF-8
 SHELL=/bin/bash
SourcePackage: apparmor
Uname: Linux 2.6.24-28-generic x86_64