[Kernel-packages] [Bug 1823862] Re: disco: unable to enable ufw under -virtual kernel

2019-04-10 Thread Jamie Strandboge
Marking the ufw task as Invalid. The kernel doesn't have what is needed to run iptables. ** Changed in: ufw (Ubuntu) Status: New => Invalid ** Changed in: ufw (Ubuntu) Assignee: Jamie Strandboge (jdstrand) => (unassigned) -- You received this bug notification becaus

[Kernel-packages] [Bug 1823862] Re: disco: unable to enable ufw under -virtual kernel

2019-04-10 Thread Jamie Strandboge
I can confirm that without linux-modules-extra-*, iptables is broken. Reduced test case: $ sudo iptables -L -n iptables: No chain/target/match by that name. Full test case: $ sudo /usr/share/ufw/check-requirements -f ... ERROR: could not create 'ufw-check-requirements'. Aborting FAIL: check your

[Kernel-packages] [Bug 1820114] Re: iptables v1.6.1: can't initialize iptables table `filter': Memory allocation problem

2019-04-10 Thread Jamie Strandboge
FYI, I saw this when looking at https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1823862. In the other bug, the reporter say a different error message, but I saw 'iptables v1.6.1: can't initialize iptables table `filter': Memory allocation problem'. If those in this bug do not have linux-module

[Kernel-packages] [Bug 1820114] Re: iptables v1.6.1: can't initialize iptables table `filter': Memory allocation problem

2019-04-10 Thread Jamie Strandboge
To be clear, when I installed linux-modules-extra-5.0.0-8-generic, I no longer saw this error message. Of course, it might not strictly be a duplicate, but I'll let the kernel team figure that out. -- You received this bug notification because you are a member of Kernel Packages, which is subscri

[Kernel-packages] [Bug 1824812] Re: apparmor does not start in Disco LXD containers

2019-04-15 Thread Jamie Strandboge
The following will reproduce the issue in a disco VM with disco LXD container: Initial setup: 1. have an up to date disco vm $ cat /proc/version_signature Ubuntu 5.0.0-11.12-generic 5.0.6 2. sudo snap install lxd 3. sudo adduser `id -un` lxd 4. newgrp lxd 5. sudo lxd init # use defaults 6. . /et

[Kernel-packages] [Bug 1824812] Re: apparmor does not start in Disco LXD containers

2019-04-15 Thread Jamie Strandboge
Since the apparmor SFS_MOUNTPOINT change is small, I'll prepare an upload for that immediately. We may need another parser update for the other issue. ** Changed in: apparmor (Ubuntu) Status: Triaged => In Progress -- You received this bug notification because you are a member of Kernel P

[Kernel-packages] [Bug 1824812] Re: apparmor does not start in Disco LXD containers

2019-04-15 Thread Jamie Strandboge
Uploaded 2.13.2-9ubuntu6 with the SFS_MOUNTPOINT change. -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1824812 Title: apparmor does not start in Disco LXD containers Status in AppArmor

[Kernel-packages] [Bug 1556419] Re: nf_conntrack: automatic helper assignment is deprecated

2019-08-25 Thread Jamie Strandboge
** Changed in: ufw (Ubuntu) Status: New => Triaged ** Changed in: ufw (Ubuntu) Importance: Undecided => Medium ** Changed in: ufw (Ubuntu) Assignee: (unassigned) => Jamie Strandboge (jdstrand) -- You received this bug notification because you are a member of Kernel

[Kernel-packages] [Bug 1658219] Re: flock not mediated by 'k'

2019-08-26 Thread Jamie Strandboge
After discussing with Field, snapd, kernel and the security team, this will break existing Ubuntu Core devices that use the 4.4 kernel and the network-manager snap in the default channel (per reporter, the 1.10 channel is unaffected). Therefore, the 4.4 kernels snaps that include this change (ie, 4

[Kernel-packages] [Bug 1820114] Re: iptables v1.6.1: can't initialize iptables table `filter': Memory allocation problem

2019-03-25 Thread Jamie Strandboge
FYI, I cannot reproduce this with even less memory: $ iptables --version iptables v1.6.1 $ free totalusedfree shared buff/cache available Mem: 265712 114824 667441024 84144 36024 Swap: 0 0

[Kernel-packages] [Bug 1820114] Re: iptables v1.6.1: can't initialize iptables table `filter': Memory allocation problem

2019-03-25 Thread Jamie Strandboge
Are there additional steps that need to occur? ** Changed in: iptables (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1820114 Title: iptables v

[Kernel-packages] [Bug 1821625] Re: systemd 237-3ubuntu10.14 ADT test failure on Bionic ppc64el (test-seccomp)

2019-06-03 Thread Jamie Strandboge
FYI, please note that seccomp 2.4.1 was pushed to bionic in https://usn.ubuntu.com/4001-1/ on 2019/05/30. It shouldn't affect this bug report AFAICT because while the 2.4.1 Ubuntu packaging drops these patches, the upstream commits for lp-1815415-arch-update-syscalls-for- Linux-4.9.patch and lp-181

[Kernel-packages] [Bug 1861359] Re: swap storms kills interactive use

2020-04-16 Thread Jamie Strandboge
This entry: * swap storms kills interactive use (LP: #1861359) - SAUCE: mm/page_alloc.c: disable memory reclaim watermark boosting by default closed this bug, but per latest comments, that isn't sufficient to address the issue. Putting back to Confirmed. ** Changed in: linux (Ubuntu Focal

[Kernel-packages] [Bug 1868894] Re: [uc18] docker overlayfs* seems broken

2020-03-31 Thread Jamie Strandboge
P_REVISION}/{,**} rwl, since the snap already has read/write access to these directories when /system-data is not prepended. I've taken a todo to send up a PR for this. ** Also affects: snapd Importance: Undecided Status: New ** Changed in: snapd Status: New => Triaged ** C

[Kernel-packages] [Bug 1556419] Re: nf_conntrack: automatic helper assignment is deprecated

2020-04-02 Thread Jamie Strandboge
The linux task can be marked as Fix Released since net/netfilter/nf_conntrack_helper has defaulted to 0 since 4.7. ** Changed in: ufw (Ubuntu) Status: Triaged => In Progress ** Changed in: linux (Ubuntu) Status: Confirmed => Fix Released -- You received this bug notification becau

[Kernel-packages] [Bug 1556419] Re: nf_conntrack: automatic helper assignment is deprecated

2020-04-02 Thread Jamie Strandboge
Users seeing this issue should modify IPT_MODULES in /etc/defaults/ufw to be empty. Ubuntu 20.04 will do this be default and future releases of ufw will introduce rule syntax for working with helper rules. -- You received this bug notification because you are a member of Kernel Packages, which is

[Kernel-packages] [Bug 1880025] Re: apparmor="DENIED" on docker container files

2020-05-26 Thread Jamie Strandboge
*** This bug is a duplicate of bug 1879690 *** https://bugs.launchpad.net/bugs/1879690 Actually, this is 1879690 which is a bug in the Ubuntu kernel. ** Project changed: snapd => linux (Ubuntu) ** Changed in: linux (Ubuntu) Status: New => Confirmed ** This bug has been marked a dupli

[Kernel-packages] [Bug 1831490] Re: kernel is out of memory and killed during a kernel sys_write operation

2019-12-17 Thread Jamie Strandboge
*** This bug is a duplicate of bug 1848567 *** https://bugs.launchpad.net/bugs/1848567 I'm going to mark the linux task as Invalid and then mark as a dupe of bug 1848567 ** Changed in: linux (Ubuntu) Status: Confirmed => Won't Fix ** Changed in: apparmor (Ubuntu) Status: New =>

[Kernel-packages] [Bug 1824812] Re: apparmor does not start in Disco LXD containers

2019-12-17 Thread Jamie Strandboge
This was fixed upstream in 61c27d8808f0589beb6a319cc04073e8bb32d860 ** Changed in: apparmor Status: Triaged => Fix Released -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1824812 T

[Kernel-packages] [Bug 1861359] Re: swap storms kills interactive use

2020-01-31 Thread Jamie Strandboge
Seth and I talked about this and I marked this as affects me. If it helps, I saw this on eoan and focal doesn't make a difference (which might suggest the change is between disco and eoan). -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to l

[Kernel-packages] [Bug 1861359] Re: swap storms kills interactive use

2020-01-31 Thread Jamie Strandboge
FYI, I decided to do this: $ sudo swapoff -a && sudo swapon -a $ free -h totalusedfree shared buff/cache available Mem: 15Gi 5.9Gi 4.8Gi 2.0Gi 4.8Gi 7.2Gi Swap: 15Gi 348Mi15Gi Even though I am no

[Kernel-packages] [Bug 1861359] Re: swap storms kills interactive use

2020-01-31 Thread Jamie Strandboge
I forgot to mention, I also have nvme. -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1861359 Title: swap storms kills interactive use Status in linux package in Ubuntu: Confirmed Bu

[Kernel-packages] [Bug 1701297] Re: NTP reload failure (unable to read library) on overlayfs

2018-04-17 Thread Jamie Strandboge
** Changed in: apparmor (Ubuntu) Status: Confirmed => Invalid -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1701297 Title: NTP reload failure (unable to read library) on overlayf

[Kernel-packages] [Bug 1772775] Re: 4.4.0-127.153 generates many "sit: non-ECT" messages

2018-05-23 Thread Jamie Strandboge
I too am seeing this after the most recent upgrade: $ grep -cF 'sit: non-ECT' /var/log/syslog 2917 -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1772775 Title: 4.4.0-127.153 generates

[Kernel-packages] [Bug 1691152] Re: linux-azure: -proposed tracker

2018-07-25 Thread Jamie Strandboge
** Changed in: kernel-sru-workflow/security-signoff Assignee: Canonical Security Team (canonical-security) => Ubuntu Security Team (ubuntu-security) -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux-azure in Ubuntu. https://bugs.

[Kernel-packages] [Bug 1699051] Re: linux: -proposed tracker

2018-07-25 Thread Jamie Strandboge
** Changed in: kernel-sru-workflow/security-signoff Assignee: Canonical Security Team (canonical-security) => Ubuntu Security Team (ubuntu-security) -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launch

[Kernel-packages] [Bug 1408106] Re: attach_disconnected not sufficient for overlayfs

2017-05-16 Thread Jamie Strandboge
Ok, I spent quite a bit of time evaluating this and believe this bug can be closed, but other bugs open. In looking at this I created https://code.launchpad.net/~jdstrand/+git /test-overlay (to build simply git clone, run 'snapcraft', install the snap and then run 'test-overlay' for instructions o

[Kernel-packages] [Bug 1408106] Re: attach_disconnected not sufficient for overlayfs

2017-05-16 Thread Jamie Strandboge
Actually, I marked the MAAS task as incomplete in case people want to give feedback. -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1408106 Title: attach_disconnected not sufficient for

[Kernel-packages] [Bug 1408106] Re: attach_disconnected not sufficient for overlayfs

2017-05-16 Thread Jamie Strandboge
Closing the MAAS task as it the referenced bug is marked Fix Release. If there are issues there still, please see my previous comment and look at the code in that snap-- there are viable ways to use overlayfs with chroot and an apparmor alias rule, or overlayfs with private mount, chroot and pivot_

[Kernel-packages] [Bug 1898280] [NEW] Please unrevert the apparmor audit rule filtering feature

2020-10-02 Thread Jamie Strandboge
Public bug reported: Ubuntu carried a patch to apparmor for audit rule filtering, but it was reverted due to conflicts related to secids with earlier LSM stacking patchsets. The upstream LSM stacking patchset is believed to resolve these issues and groovy now carries the updated LSM stacking patch

[Kernel-packages] [Bug 1898280] Re: Please unrevert the apparmor audit rule filtering feature

2020-10-02 Thread Jamie Strandboge
After more discussion with John, while groovy does have a newer stacking patchset, it doesn't have the latest patchset that resolves the audit subsystem. Unfortunately, as of today, all of those patches haven't been signed-off on yet so there might be future changes. ** Description changed: Ubu

[Kernel-packages] [Bug 1898280] Re: Please unrevert the apparmor audit rule filtering feature

2020-10-07 Thread Jamie Strandboge
FYI, John refreshed the patchset to v20 and reenabled audit rule filtering and submitted to https://lists.ubuntu.com/archives/kernel- team/2020-October/113932.html. Since this is a significant change, it will be considered for a stable release update (SRU) after groovy release (to allow for peer re

[Kernel-packages] [Bug 1890848] [NEW] 'ptrace trace' needed to readlink() /proc/*/ns/* files

2020-08-07 Thread Jamie Strandboge
Public bug reported: Per 'man namespaces': "Permission to dereference or read (readlink(2)) these symbolic links is governed by a ptrace access mode PTRACE_MODE_READ_FSCREDS check; see ptrace(2)." This suggests that a 'ptrace read' rule should be sufficient to readlink() /proc/*/ns/*, which is t

[Kernel-packages] [Bug 1890848] Re: 'ptrace trace' needed to readlink() /proc/*/ns/* files on older kernels

2020-08-07 Thread Jamie Strandboge
** Summary changed: - 'ptrace trace' needed to readlink() /proc/*/ns/* files + 'ptrace trace' needed to readlink() /proc/*/ns/* files on older kernels -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad

[Kernel-packages] [Bug 1890848] Re: 'ptrace trace' needed to readlink() /proc/*/ns/* files on older kernels

2020-08-10 Thread Jamie Strandboge
Thanks John! Is this something that we can get into the next SRU cycle? -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1890848 Title: 'ptrace trace' needed to readlink() /proc/*/ns/* fil

[Kernel-packages] [Bug 1891020] Re: No IPv4 iptable kernel module can be loaded

2020-08-10 Thread Jamie Strandboge
** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1891020 Title: No IPv4 iptable kernel module can be loaded Status in linux pac

[Kernel-packages] [Bug 1890848] Re: 'ptrace trace' needed to readlink() /proc/*/ns/* files on older kernels

2020-08-10 Thread Jamie Strandboge
I spoke with John and he plans to SRU this. Marking as triaged and assigning to him. Thanks John! ** Changed in: linux (Ubuntu Xenial) Importance: Undecided => Medium ** Changed in: linux (Ubuntu Xenial) Status: Confirmed => Triaged ** Changed in: linux (Ubuntu Bionic) Status: C

[Kernel-packages] [Bug 1891020] Re: iptable_filter and ip6table_filter cannot be loaded with 5.8 kernel

2020-08-10 Thread Jamie Strandboge
** Summary changed: - No IPv4 iptable kernel module can be loaded + iptable_filter and ip6table_filter cannot be loaded with 5.8 kernel -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/18910

[Kernel-packages] [Bug 1891020] Re: iptable_filter and ip6table_filter cannot be loaded with 5.8 kernel

2020-08-10 Thread Jamie Strandboge
I cannot confirm this with the 5.8.0-12 kernel. Eg, with the 5.4 kernel in groovy, things work fine: $ cat /proc/version_signature Ubuntu 5.4.0-42.46-generic 5.4.44 $ sudo modprobe iptable_filter $ sudo modprobe ip6table_filter $ lsmod|grep table_filter ip6table_filter16384 0 ip6_tables

[Kernel-packages] [Bug 1890848] Re: 'ptrace trace' needed to readlink() /proc/*/ns/* files on older kernels

2020-08-14 Thread Jamie Strandboge
FYI, John provided me a test kernel for 18.04 and it resolved the issue. This will be the basis of the SRU. -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1890848 Title: 'ptrace trace' n

[Kernel-packages] [Bug 1898280] Re: Please unrevert the apparmor audit rule filtering feature

2020-11-12 Thread Jamie Strandboge
Thanks John! :) -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1898280 Title: Please unrevert the apparmor audit rule filtering feature Status in linux package in Ubuntu: Fix Released

[Kernel-packages] [Bug 1734038] Re: utils don't understand «include "/where/ever"» (was: Potential regression found with apparmor test on Xenial/Zesty)

2017-11-27 Thread Jamie Strandboge
@mvo - this is probably obvious, but if you used '#include' instead of 'include', it would side-step the issue. -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1734038 Title: utils don't

[Kernel-packages] [Bug 1734038] Re: utils don't understand «include "/where/ever"» (was: Potential regression found with apparmor test on Xenial/Zesty)

2017-11-30 Thread Jamie Strandboge
Since snapd is using this bug for its SRU blocker and we have bug #1733700 that is the same issue, I'm going to use this bug as the snapd one and for the apparmor one. ** Summary changed: - utils don't understand «include "/where/ever"» (was: Potential regression found with apparmor test on Xeni

[Kernel-packages] [Bug 1744942] Re: Lenovo IdeaPad U460 fails to boot with 4.13.0-31.34~16.04.1

2018-01-31 Thread Jamie Strandboge
Marking the incomplete tasks as confirmed so the bot doesn't auto-close the bug. ** Changed in: linux (Ubuntu) Status: Incomplete => Confirmed ** Changed in: linux (Ubuntu Artful) Status: Incomplete => Confirmed -- You received this bug notification because you are a member of Ker

[Kernel-packages] [Bug 1370218] Re: Fine-grained shm mediation (confined applications need access to /run/shm/shmfd*)

2018-02-06 Thread Jamie Strandboge
** Changed in: qtbase-opensource-src (Ubuntu) Status: New => Won't Fix ** Changed in: qtmultimedia-opensource-src (Ubuntu) Status: New => Won't Fix -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bug

[Kernel-packages] [Bug 1746463] Re: apparmor profile load in stacked policy container fails

2018-02-27 Thread Jamie Strandboge
Add a snapd task so that when the https://launchpad.net/ubuntu/+source /linux-gcp is Fix Released, snapd can re-enable the tests/main/lxd test on GCE. ** Also affects: linux (Ubuntu) Importance: Undecided Status: New ** Changed in: linux (Ubuntu Artful) Status: New => Fix Committ

[Kernel-packages] [Bug 1746463] Re: apparmor profile load in stacked policy container fails

2018-02-27 Thread Jamie Strandboge
Since this is going to be fixed in 'linux' and 'linux-gcp', adding tasks for those. ** Changed in: apparmor (Ubuntu Artful) Status: Won't Fix => Fix Committed ** Changed in: linux (Ubuntu Artful) Status: Fix Committed => Confirmed ** Also affects: linux-gcp (Ubuntu) Importance:

[Kernel-packages] [Bug 1746463] Re: apparmor profile load in stacked policy container fails

2018-02-27 Thread Jamie Strandboge
FYI, the following kernels are also affected (all 4.13 based): * linux-azure * linux-hwe * linux-hwe-edge * linux-oem * linux-raspi2 -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1746463

[Kernel-packages] [Bug 1567597] Re: implement 'complain mode' in seccomp for developer mode with snaps

2018-03-05 Thread Jamie Strandboge
This is fixed in xenial 2.3.1-2.1ubuntu2~16.04.1 ** Changed in: libseccomp (Ubuntu Xenial) Status: In Progress => Fix Released -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1567597

[Kernel-packages] [Bug 1716848] Re: package bluez 5.37-0ubuntu5.1 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1

2017-09-13 Thread Jamie Strandboge
Marking as "Won't Fix" for the bluez deb -- the postinst is doing the right thing, there just happens to be something installed outside of dpkg/apt that is getting in the way. ** Changed in: bluez (Ubuntu) Status: Confirmed => Won't Fix -- You received this bug notification because you ar

[Kernel-packages] [Bug 1716848] Re: package bluez 5.37-0ubuntu5.1 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1

2017-09-13 Thread Jamie Strandboge
Looking at the logs I see: Sep 13 07:51:08 agda-HP-Pavilion-dv6500-Notebook-PC audit[1221]: AVC apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap.bluez.bluetoothctl" pid=1221 comm="apparmor_parser" This indicates you have the bluez snap installed. This bug is about the

[Kernel-packages] [Bug 1408106] Re: attach_disconnected not sufficient for overlayfs

2017-07-06 Thread Jamie Strandboge
@Frode, I can yes, when I file them. I need to do a bit of work for simple reproducers/etc/etc to file them. I've added an item to add a comment to this bug when I do. -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https:

[Kernel-packages] [Bug 1648903] Re: Permission denied and inconsistent behavior in complain mode with 'ip netns list' command

2017-02-27 Thread Jamie Strandboge
This is fixed with 4.10.0-8.10-generic. Marking zesty task as fixed. ** Changed in: linux (Ubuntu) Status: Incomplete => Fix Released -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/

[Kernel-packages] [Bug 1648903] Re: Permission denied and inconsistent behavior in complain mode with 'ip netns list' command

2017-02-27 Thread Jamie Strandboge
Confirmed this bug is fixed with 4.4.0-65.86-generic on xenial. ** Tags removed: verification-needed-xenial ** Tags added: verification-done-xenial ** Changed in: apparmor Status: New => In Progress ** Changed in: apparmor Assignee: (unassigned) => John Johansen (jjohansen) -- You

[Kernel-packages] [Bug 1648903] Re: Permission denied and inconsistent behavior in complain mode with 'ip netns list' command

2017-02-27 Thread Jamie Strandboge
Confirmed this bug is fixed with 4.8.0-40.43-generic on yakkety. ** Tags removed: verification-needed-yakkety ** Tags added: verification-done-yakkety -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad

[Kernel-packages] [Bug 1648903] Re: Permission denied and inconsistent behavior in complain mode with 'ip netns list' command

2017-02-27 Thread Jamie Strandboge
FYI, this issue was hitting snapcrafters on Raspberry Pi3 (https://lists.ubuntu.com/archives/snapcraft/2017-February/003366.html). Please also update the other reference kernels and snaps. Thanks! -- You received this bug notification because you are a member of Kernel Packages, which is subscrib

[Kernel-packages] [Bug 1658219] Re: flock not mediated by 'k'

2017-02-27 Thread Jamie Strandboge
4.10.0-8.10-generic has the fix for this bug so marking the zesty task as released. ** Changed in: linux (Ubuntu) Status: Incomplete => Fix Released ** Changed in: apparmor Status: Triaged => In Progress ** Changed in: apparmor Assignee: (unassigned) => John Johansen (jjohanse

[Kernel-packages] [Bug 1658219] Re: flock not mediated by 'k'

2017-02-27 Thread Jamie Strandboge
4.8.0-40.43-generic fixes this issue on yakkety. -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1658219 Title: flock not mediated by 'k' Status in AppArmor: In Progress Status in linu

[Kernel-packages] [Bug 1658219] Re: flock not mediated by 'k'

2017-02-27 Thread Jamie Strandboge
4.4.0-65.86-generic fixes this issue on xenial. ** Tags removed: verification-needed-xenial verification-needed-yakkety ** Tags added: verification-done-xenial verification-done-yakkety -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linu

[Kernel-packages] [Bug 1547619] Re: Intermittent screen blinking with 4k external mini display port with 4.4 kernels

2016-03-03 Thread Jamie Strandboge
The kernels from http://kernel.ubuntu.com/~jsalisbury/lp1547619 are 4.4.0-040400rc1.201602231809 and have the same checksums as the kernels I tested in https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1547619/comments/15. -- You received this bug notification because you are a member of Kerne

[Kernel-packages] [Bug 1547619] Re: Intermittent screen blinking with 4k external mini display port with 4.4 kernels

2016-03-03 Thread Jamie Strandboge
I saw a new kernel in xenial with intel fixes so I decided to try it. This kernel has the bug: $ cat /proc/version_signature Ubuntu 4.4.0-9.24-generic 4.4.3 I'll try the bisected kernel now. -- You received this bug notification because you are a member of Kernel Packages, which is subscribed

[Kernel-packages] [Bug 1547619] Re: Intermittent screen blinking with 4k external mini display port with 4.4 kernels

2016-03-07 Thread Jamie Strandboge
I have booted into this kernel: $ cat /proc/version Linux version 4.3.0-040300-generic (jsalisbury@gomeisa) (gcc version 5.3.1 20160225 (Ubuntu 5.3.1-10ubuntu2) ) #201603030935 SMP Thu Mar 3 14:39:41 UTC 2016 Since the bug doesn't always show itself right away, I will want to use the kernel fo

[Kernel-packages] [Bug 1547619] Re: Intermittent screen blinking with 4k external mini display port with 4.4 kernels

2016-03-10 Thread Jamie Strandboge
While I can't be 100% sure cause the issue is intermittent, it seems that this kernel does not have the bug: $ cat /proc/version Linux version 4.3.0-040300-generic (jsalisbury@gomeisa) (gcc version 5.3.1 20160225 (Ubuntu 5.3.1-10ubuntu2) ) #201603030935 SMP Thu Mar 3 14:39:41 UTC 2016 $ uptime

[Kernel-packages] [Bug 1547619] Re: Intermittent screen blinking with 4k external mini display port with 4.4 kernels

2016-03-10 Thread Jamie Strandboge
I have booted into this kernel: $ cat /proc/version Linux version 4.3.0-040300-generic (jsalisbury@gomeisa) (gcc version 5.3.1 20160225 (Ubuntu 5.3.1-10ubuntu2) ) #201603101009 SMP Thu Mar 10 15:13:56 UTC 2016 Since the bug doesn't always show itself right away, I will want to use the kernel fo

[Kernel-packages] [Bug 1547619] Re: Intermittent screen blinking with 4k external mini display port with 4.4 kernels

2016-03-14 Thread Jamie Strandboge
FYI, I needed overlayfs and so had to interrupt my 4.3.0-040300-generic (#201603101009) testing and booted into 4.4.0-12.28. 4.4.0-12.28 has the bug. I am back in 4.3.0-040300-generic (#201603101009) now. -- You received this bug notification because you are a member of Kernel Packages, which is

[Kernel-packages] [Bug 1556419] Re: nf_conntrack: automatic helper assignment is deprecated

2016-03-14 Thread Jamie Strandboge
FYI, this is not a new issue. -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1556419 Title: nf_conntrack: automatic helper assignment is deprecated Status in iptables package in Ubuntu

[Kernel-packages] [Bug 1547619] Re: Intermittent screen blinking with 4k external mini display port with 4.4 kernels

2016-03-15 Thread Jamie Strandboge
While I can't be 100% sure cause the issue is intermittent, it seems that this kernel does not have the bug: $ cat /proc/version Linux version 4.3.0-040300-generic (jsalisbury@gomeisa) (gcc version 5.3.1 20160225 (Ubuntu 5.3.1-10ubuntu2) ) #201603101009 SMP Thu Mar 10 15:13:56 UTC 2016 $ uptime

[Kernel-packages] [Bug 1560094] Re: Starting bluez service is denied

2016-03-21 Thread Jamie Strandboge
Your snapcraft.yaml is wrong for the new world. Ie, you have: apps: bluetoothctl: command: usr/bin/bluetoothctl uses: [bluez-client] obexctl: command: usr/bin/obexctl uses: [bluez-client] bluez: command: "usr/lib/bluetooth/bluetoothd -E" daemon: simple uses: [

[Kernel-packages] [Bug 1560094] Re: Starting bluez service is denied

2016-03-21 Thread Jamie Strandboge
Also, you should be using the new snappy interface for dbus instead of adding rules to copy dbus bus policy files into place. I haven't used this before-- you might ping zyga for details. -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to blu

[Kernel-packages] [Bug 1560583] [NEW] reading /sys/kernel/security/apparmor/profiles requires CAP_MAC_ADMIN

2016-03-22 Thread Jamie Strandboge
Public bug reported: $ cat ./t #include profile t { #include /bin/cat ixr, /sys/kernel/security/apparmor/profiles r, } $ sudo apparmor_parser -r ./t $ sudo aa-exec -p t -- cat /sys/kernel/security/apparmor/profiles cat: /sys/kernel/security/apparmor/profiles: Permission denied [1] k

[Kernel-packages] [Bug 1560583] Re: reading /sys/kernel/security/apparmor/profiles requires CAP_MAC_ADMIN

2016-03-23 Thread Jamie Strandboge
** Changed in: linux (Ubuntu) Status: Confirmed => In Progress -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1560583 Title: reading /sys/kernel/security/apparmor/profiles require

[Kernel-packages] [Bug 1562989] Re: 'aa_change_onexec failed with -1. errmsg: Permission denied'

2016-03-28 Thread Jamie Strandboge
** Description changed: $ sudo snappy install ubuntu-clock-app.ubuntucore-dev $ ubuntu-clock-app.clock aa_change_onexec failed with -1. errmsg: Permission denied [1] Downgrading to ubuntu-core-launcher doesn't help the clock app get past this failure. The hello-world app works

[Kernel-packages] [Bug 1562989] Re: 'aa_change_onexec failed with -1. errmsg: Permission denied'

2016-03-28 Thread Jamie Strandboge
I took the hello-world application, then adjusted its yaml to be the same as the ubuntu-clock-app (using ubuntu-cl0ck-app as the name) and was unable to reproduce. -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bu

[Kernel-packages] [Bug 1562989] Re: 'aa_change_onexec failed with -1. errmsg: Permission denied'

2016-03-28 Thread Jamie Strandboge
** Tags added: apparmor -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1562989 Title: 'aa_change_onexec failed with -1. errmsg: Permission denied' Status in linux package in Ubuntu: C

[Kernel-packages] [Bug 1562989] Re: 'aa_change_onexec failed with -1. errmsg: Permission denied'

2016-03-28 Thread Jamie Strandboge
Here is a reproducer. See main.c for instructions. ** Attachment added: "1562989.tar.gz" https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1562989/+attachment/4615205/+files/1562989.tar.gz -- You received this bug notification because you are a member of Kernel Packages, which is subscrib

[Kernel-packages] [Bug 1562989] Re: 'aa_change_onexec failed with -1. errmsg: Permission denied'

2016-03-28 Thread Jamie Strandboge
It appears that the profile name can't start with 'u'. If I change the app-profile to prepend anything other than 'u', then it works. Eg, if I update app-profile accordingly before each call to change the profile name: $ sudo apparmor_parser -r ./app-profile ./launcher-profile && aa-exec -p laun

[Kernel-packages] [Bug 1562989] Re: 'aa_change_onexec failed with -1. errmsg: Permission denied'

2016-03-28 Thread Jamie Strandboge
** Changed in: linux (Ubuntu) Status: Confirmed => Triaged -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1562989 Title: 'aa_change_onexec failed with -1. errmsg: Permission denie

[Kernel-packages] [Bug 1562989] Re: 'aa_change_onexec failed with -1. errmsg: Permission denied'

2016-03-28 Thread Jamie Strandboge
anged in: ubuntu-core-launcher (Ubuntu) Status: Triaged => In Progress ** Changed in: ubuntu-core-launcher (Ubuntu) Assignee: Tyler Hicks (tyhicks) => Jamie Strandboge (jdstrand) -- You received this bug notification because you are a member of Kernel Packages, which is subscrib

[Kernel-packages] [Bug 1547619] Re: Intermittent screen blinking with 4k external mini display port with 4.4 kernels

2016-02-22 Thread Jamie Strandboge
I have booted into this kernel: $ cat /proc/version_signature Ubuntu 4.4.0-0.10Commit3b7e590bf-generic 4.4.0 Since the bug doesn't always show itself right away, I will want to use the kernel for at least several hours. I'll report back as soon as I see the bug or after using the computer throug

[Kernel-packages] [Bug 1547619] Re: Intermittent screen blinking with 4k external mini display port with 4.4 kernels

2016-02-22 Thread Jamie Strandboge
** Description changed: - When using an external 4K monitor plugging into the mini display port on my Dell XPS 13 9343 using both the laptop screen and the external monitor (external monitor is left and laptop screen right), when using all of the following kernels: + When using an external 4K m

[Kernel-packages] [Bug 1547619] Re: Intermittent screen blinking with 4k external mini display port with 4.4 kernels

2016-02-22 Thread Jamie Strandboge
This kernel has the bug: $ cat /proc/version_signature Ubuntu 4.4.0-0.10Commit3b7e590bf-generic 4.4.0 -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1547619 Title: Intermittent screen

[Kernel-packages] [Bug 1547619] [NEW] Intermittent screen blinking with 4k external mini display port with 4.4 kernels

2016-02-22 Thread Jamie Strandboge
Public bug reported: When using an external 4K monitor plugged into the mini display port on my Dell XPS 13 9343 using both the laptop screen and the external monitor (external monitor is left and laptop screen right), when using all of the following kernels: 4.4.0-2.16-generic 4.4.0-4.19-gener

[Kernel-packages] [Bug 1547619] Re: Intermittent screen blinking with 4k external mini display port with 4.4 kernels

2016-02-22 Thread Jamie Strandboge
This kernel has the bug: $ cat /proc/version_signature Ubuntu 4.4.0-1.15-generic 4.4.0 -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1547619 Title: Intermittent screen blinking with 4

[Kernel-packages] [Bug 1547619] Re: Intermittent screen blinking with 4k external mini display port with 4.4 kernels

2016-02-23 Thread Jamie Strandboge
I have booted into this kernel: $ cat /proc/version_signature Ubuntu 4.4.0-0.3~lp1547619Commit324ae35-generic 4.4.0 Since the bug doesn't always show itself right away, I will want to use the kernel for at least several hours. I'll report back as soon as I see the bug or after using the computer

[Kernel-packages] [Bug 1547619] Re: Intermittent screen blinking with 4k external mini display port with 4.4 kernels

2016-02-23 Thread Jamie Strandboge
This kernel has the bug: $ cat /proc/version_signature Ubuntu 4.4.0-0.3~lp1547619Commit324ae35-generic 4.4.0 -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1547619 Title: Intermittent s

[Kernel-packages] [Bug 1547619] Re: Intermittent screen blinking with 4k external mini display port with 4.4 kernels

2016-02-23 Thread Jamie Strandboge
It is difficult for me to use a non-Ubuntu kernel since I do a lot of work with apparmor for the distro. I suppose I could try for a little while at a time, but my ability to test will be impeded (ie, I'll need to run mainline only when not doing the other work). -- You received this bug notifica

[Kernel-packages] [Bug 1547619] Re: Intermittent screen blinking with 4k external mini display port with 4.4 kernels

2016-02-24 Thread Jamie Strandboge
I have booted into this kernel: $ cat /proc/version Linux version 4.4.0-040400rc1-generic (jsalisbury@gomeisa) (gcc version 5.3.1 20160222 (Ubuntu 5.3.1-9ubuntu3) ) #201602231809 SMP Tue Feb 23 23:12:04 UTC 2016 Since the bug doesn't always show itself right away, I will want to use the kernel

[Kernel-packages] [Bug 1547619] Re: Intermittent screen blinking with 4k external mini display port with 4.4 kernels

2016-02-24 Thread Jamie Strandboge
This kernel has the bug: $ cat /proc/version Linux version 4.4.0-040400rc1-generic (jsalisbury@gomeisa) (gcc version 5.3.1 20160222 (Ubuntu 5.3.1-9ubuntu3) ) #201602231809 SMP Tue Feb 23 23:12:04 UTC 2016 -- You received this bug notification because you are a member of Kernel Packages, which

[Kernel-packages] [Bug 1545174] Re: can no longer use hands free calling after upgrade to OTA9

2016-03-02 Thread Jamie Strandboge
** Description changed: - I'm on arale, OTA9. With OTA8.5 I could pair, listen to music and make - calls with no problem. After upgrading (and without unpairing/re-pairing - after upgrading), I can connect to the car, and I can listen to music - but if I try to make a call while connected to bluet

[Kernel-packages] [Bug 1545174] [NEW] can no longer use hands free calling after upgrade to OTA9

2016-02-12 Thread Jamie Strandboge
Public bug reported: I'm on arale, OTA9. With OTA8.5 I could pair, listen to music and make calls with no problem. After upgrading (and without unpairing/re-pairing after upgrading), I can connect to the car, and I can listen to music but if I try to make a call while connected to bluetooth, the c

[Kernel-packages] [Bug 1545174] Re: can no longer use hands free calling after upgrade to OTA9

2016-02-12 Thread Jamie Strandboge
** Description changed: I'm on arale, OTA9. With OTA8.5 I could pair, listen to music and make calls with no problem. After upgrading (and without unpairing/re-pairing after upgrading), I can connect to the car, and I can listen to music but if I try to make a call while connected to bluet

[Kernel-packages] [Bug 1547619] Re: Intermittent screen blinking with 4k external mini display port with 4.4 kernels

2016-05-09 Thread Jamie Strandboge
Apologies for the delay-- I needed our Ubuntu kernel for a number of weeks and had to pause this bisection. I have booted into this kernel: $ cat /proc/version Linux version 4.3.0-040300-generic (jsalisbury@gomeisa) (gcc version 5.3.1 20160311 (Ubuntu 5.3.1-11ubuntu1) ) #201603151533 SMP Tue Ma

[Kernel-packages] [Bug 1547619] Re: Intermittent screen blinking with 4k external mini display port with 4.4 kernels

2016-05-09 Thread Jamie Strandboge
Ah, that was fast. This kernel has the bug: $ cat /proc/version Linux version 4.3.0-040300-generic (jsalisbury@gomeisa) (gcc version 5.3.1 20160311 (Ubuntu 5.3.1-11ubuntu1) ) #201603151533 SMP Tue Mar 15 19:37:15 UTC 2016 -- You received this bug notification because you are a member of Kernel

[Kernel-packages] [Bug 1547619] Re: Intermittent screen blinking with 4k external mini display port with 4.4 kernels

2016-05-10 Thread Jamie Strandboge
I have booted into this kernel: $ cat /proc/version Linux version 4.4.9-040409-generic (kernel@gomeisa) (gcc version 5.3.1 20160413 (Ubuntu 5.3.1-14ubuntu2) ) #201605041832 SMP Wed May 4 22:34:16 UTC 2016 Since the bug doesn't always show itself right away, I will want to use the kernel for at

[Kernel-packages] [Bug 1547619] Re: Intermittent screen blinking with 4k external mini display port with 4.4 kernels

2016-05-10 Thread Jamie Strandboge
This kernel has the bug: $ cat /proc/version Linux version 4.4.9-040409-generic (kernel@gomeisa) (gcc version 5.3.1 20160413 (Ubuntu 5.3.1-14ubuntu2) ) #201605041832 SMP Wed May 4 22:34:16 UTC 2016 -- You received this bug notification because you are a member of Kernel Packages, which is subsc

[Kernel-packages] [Bug 1547619] Re: Intermittent screen blinking with 4k external mini display port with 4.4 kernels

2016-05-16 Thread Jamie Strandboge
I have booted into this kernel: $ cat /proc/version Linux version 4.3.0-040300rc5-generic (jsalisbury@gomeisa) (gcc version 5.2.1 20151010 (Ubuntu 5.2.1-22ubuntu2) ) #201605111621 SMP Wed May 11 20:26:24 UTC 2016 Since the bug doesn't always show itself right away, I will want to use the kernel

[Kernel-packages] [Bug 1547619] Re: Intermittent screen blinking with 4k external mini display port with 4.4 kernels

2016-05-17 Thread Jamie Strandboge
This kernel does not seem to have the bug after using the system all day: $ cat /proc/version Linux version 4.3.0-040300rc5-generic (jsalisbury@gomeisa) (gcc version 5.2.1 20151010 (Ubuntu 5.2.1-22ubuntu2) ) #201605111621 SMP Wed May 11 20:26:24 UTC 2016 -- You received this bug notification

[Kernel-packages] [Bug 1016299] Re: CVE-2012-2372

2014-06-26 Thread Jamie Strandboge
** Changed in: linux-lts-backport-maverick (Ubuntu Saucy) Status: New => Won't Fix ** Changed in: linux-lts-backport-natty (Ubuntu Saucy) Status: New => Won't Fix ** Changed in: linux-lts-backport-oneiric (Ubuntu Saucy) Status: New => Won't Fix ** Changed in: linux-lts-backp

[Kernel-packages] [Bug 1155022] Re: CVE-2013-1825

2014-06-26 Thread Jamie Strandboge
** Changed in: linux (Ubuntu Quantal) Status: New => Won't Fix ** Changed in: linux-armadaxp (Ubuntu Quantal) Status: New => Won't Fix ** Changed in: linux-ti-omap4 (Ubuntu Quantal) Status: New => Won't Fix -- You received this bug notification because you are a member of K

[Kernel-packages] [Bug 1130950] Re: CVE-2013-0310

2014-06-26 Thread Jamie Strandboge
** Changed in: linux (Ubuntu Quantal) Status: Fix Committed => Won't Fix ** Changed in: linux-ti-omap4 (Ubuntu Quantal) Status: Fix Committed => Won't Fix -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux-armadaxp in Ubu

  1   2   3   4   5   6   7   8   >