touch-packages team mailing list archive

[Launchpad Bug Tracker <1373555@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package apparmor - 2.8.96~2652-0ubuntu6

---------------
apparmor (2.8.96~2652-0ubuntu6) utopic; urgency=medium

  * lp1169881.patch: add /usr/bin/gnome-gmail to ubuntu-email (LP: #1169881)
  * debian/control: update Breaks on lxc 1.1.0~alpha1-0ubuntu5~ (LP: #1373555)
 -- Jamie Strandboge <jamie@xxxxxxxxxx>   Thu, 25 Sep 2014 09:03:06 -0500

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1373555

Title:
  please restrict signal, ptrace and unix mediation to the container

Status in “apparmor” package in Ubuntu:
  Fix Released
Status in “lxc” package in Ubuntu:
  Fix Released

Bug description:
  Right now the container policy uses bare rules for ptrace and signal.
  We should refine these rules to be container specific and add unix
  rules to do the same. Obviously, namespaces are intended to block
  these accesses in and of themselves, but this add an incremental
  improvement and security in depth in case something goes wrong there.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1373555/+subscriptions