group.of.nepali.translators team mailing list archive

Thread
Date

[Bug 1666897] Re: snaps with classic + jailmode confinement started to fail on zesty

To: group.of.nepali.translators@xxxxxxxxxxxxxxxxxxx
From: Launchpad Bug Tracker <1666897@xxxxxxxxxxxxxxxxxx>
Date: Mon, 27 Mar 2017 15:37:52 -0000
Reply-to: Bug 1666897 <1666897@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

This bug was fixed in the package linux - 4.4.0-70.91

---------------
linux (4.4.0-70.91) xenial; urgency=low

  * linux: 4.4.0-70.91 -proposed tracker (LP: #1674938)

  * snaps with classic + jailmode confinement started to fail on zesty
    (LP: #1666897)
    - Revert "UBUNTU: SAUCE: apparmor: fix link auditing failure due to,
      uninitialized var"
    - Revert "UBUNTU: SAUCE: fix regression with domain change in complain mode"
    - Revert "UBUNTU: SAUCE: apparmor: flock mediation is not being enforced on
      cache check"
    - Revert "UBUNTU: SAUCE: apparmor: null profiles should inherit parent control
      flags"
    - Revert "UBUNTU: SAUCE: apparmor: fix ns ref count link when removing
      profiles from policy"
    - Revert "UBUNTU: SAUCE: apparmor: Fix no_new_privs blocking change_onexec
      when using stacked namespaces"
    - Revert "UBUNTU: SAUCE: apparmor: fix oops in bind_mnt when dev_path lookup
      fails"
    - Revert "UBUNTU: SAUCE: apparmor: Don't audit denied access of special
      apparmor .null file"
    - Revert "UBUNTU: SAUCE: apparmor: fix label leak when new label is unused"
    - Revert "UBUNTU: SAUCE: apparmor: fix reference count bug in
      label_merge_insert()"
    - Revert "UBUNTU: SAUCE: apparmor: fix replacement race in reading rawdata"
    - Revert "UBUNTU: SAUCE: apparmor: fix cross ns perm of unix domain sockets"

 -- Stefan Bader <stefan.bader@xxxxxxxxxxxxx>  Wed, 22 Mar 2017 09:28:43
+0100

** Changed in: linux (Ubuntu Yakkety)
       Status: New => Fix Released

-- 
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/1666897

Title:
  snaps with classic + jailmode confinement started to fail on zesty

Status in snapd:
  Fix Released
Status in linux package in Ubuntu:
  Confirmed
Status in linux source package in Xenial:
  Fix Released
Status in linux source package in Yakkety:
  Fix Released

Bug description:
  We just noticed that zesty stated to fail when a snap using classic
  confinement is installed in jailmode.

  $ snap install --jailmode --classic python0
  $ python0 (doesn't work)
  /snap/python0/2/usr/bin/python0: error while loading shared libraries: libm.so.6: failed to map segment from shared object

  And in the system log you can see:

  [ 2929.841318] audit: type=1400 audit(1487770576.927:40):
  apparmor="DENIED" operation="file_mmap" profile="snap.python0.python0"
  name="/snap/core/1264/lib/x86_64-linux-gnu/libm-2.23.so" pid=5235
  comm="python0" requested_mask="m" denied_mask="m" fsuid=1000 ouid=0

To manage notifications about this bug go to:
https://bugs.launchpad.net/snapd/+bug/1666897/+subscriptions