I can easily reproduce with stgraber's instructions on an arm64 VM
running 20.04 with the 5.4 kernel.
Maciej asked me to provide the output of the following commands:
in the LXD container:
root@c1:~# echo 'profile snap-test { capability bpf, }' | apparmor_parser
--preprocess ; echo $?
Warning from stdin (line 1): apparmor_parser: Warning capping number of jobs to
0 * # of cpus == '16'AppArmor parser error, in stdin line 1: Invalid capability
bpf.
0
on the host:
ubuntu@anbox-streaming-stack-0:~$ echo 'profile snap-test { capability bpf, }'
| apparmor_parser --preprocess ; echo $?
AppArmor parser error, in stdin line 1: Invalid capability bpf.
profile snap-test { capability bpf1
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1964636
Title:
Incorrect handling of apparmor `bpf` capability
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/snapd/+bug/1964636/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
