group.of.nepali.translators team mailing list archive

[Stefan Bader <stefan.bader@xxxxxxxxxxxxx>]

** Changed in: linux (Ubuntu Yakkety)
       Status: Fix Released => Triaged

-- 
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/1660836

Title:
  apparmor  auditing denied access of special apparmor .null fi\ le

Status in linux package in Ubuntu:
  Fix Released
Status in linux source package in Xenial:
  Triaged
Status in linux source package in Yakkety:
  Triaged
Status in linux source package in Zesty:
  Fix Released

Bug description:
  When an fd is disallowed from being inherited during exec, instead of           
  closed it is duped to a special apparmor/.null file. This prevents the          
  fd from being reused by another file in case the application expects            
  the original file on a give fd (eg stdin/stdout etc). This results in           
  a denial message like                                                           
  [32375.561535] audit: type=1400 audit(1478825963.441:358): apparmor="DENIED" op\
  eration="file_inherit" namespace="root//lxd-t_<var-lib-lxd>" profile="/sbin/dhc\
  lient" name="/dev/pts/1" pid=16795 comm="dhclient" requested_mask="wr" denied_m\
  ask="wr" fsuid=165536 ouid=165536                                               
                                                                                  
  Further access to the fd is resultin in the rather useless denial message       
  of                                                                              
  [32375.566820] audit: type=1400 audit(1478825963.445:359): apparmor="DENIED" op\
  eration="file_perm" namespace="root//lxd-t_<var-lib-lxd>" profile="/sbin/dhclie\
  nt" name="/apparmor/.null" pid=16795 comm="dhclient" requested_mask="w" denied_\
  mask="w" fsuid=165536 ouid=0                                                    
                                                                                  
  since we have the original denial, the noisy and useless .null based            
  denials can be skipped.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1660836/+subscriptions