[Bug 668479] Re: AppArmor on Hardy Interferes with glibc Access to /proc/self/maps

[nutznboltz]

@Kees Cook - The  https://wiki.ubuntu.com/StableReleaseUpdates#Examples
section only offers a single example of how the SRU process works for a
package in main.

That example is LP #173082

Does LP #173082 actually fulfill all the requirements listed in
https://wiki.ubuntu.com/StableReleaseUpdates#Procedure ?

I don't think so.

So what bug would actually make a good example of how the SRU process
works for a main package?

-- 
AppArmor on Hardy Interferes with glibc Access to /proc/self/maps
https://bugs.launchpad.net/bugs/668479
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is a direct subscriber.

Status in “apparmor” package in Ubuntu: Fix Released
Status in “apparmor” source package in Hardy: Triaged

Bug description:
Binary package hint: apparmor

Impact: Lack of a single AppArmor base profile rule renders glibc unable to perform functions on Hardy that are available on Lucid.
Patch: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/668479/+attachment/1716210/+files/apparmor_2.1%2B1075-0ubuntu9.3.debdiff
Reproducing: trapping a segfault fails; see http://ubuntuforums.org/showthread.php?p=10043474
Regression potential: none known

Attempt to catch a SIGSEGV inside OpenLDAP on Hardy results in an AppArmor error message instead:

2010-09-28T16:41:23-04:00 molybdenum kernel 05 [kern.notice] kernel: [15908266.232011]
 audit(1285706483.638:69): type=1503 operation="inode_permission" requested_mask="::r"
 denied_mask="::r" name="/proc/22022/maps" pid=22038 profile="/usr/sbin/slapd"
 namespace="default"

ProblemType: Bug
Architecture: amd64
Date: Fri Oct 29 14:48:20 2010
DistroRelease: Ubuntu 8.04
Package: apparmor 2.1+1075-0ubuntu9.2
PackageArchitecture: amd64
ProcEnviron:
 PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games
 LANG=en_US.UTF-8
 SHELL=/bin/bash
SourcePackage: apparmor
Uname: Linux 2.6.24-28-generic x86_64