Also confirming that it's happening for me on kernel 6.8.0, after
patching yesterday.
Should we log a new bug report for 6.8.0 since this report is for 6.14?
Details:
Linux boxname 6.8.0-147-generic #147-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep
24 11:33:16 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux
Description: Ubuntu 24.04.5 LTS
Release: 24.04
Codename: noble
From 'apt upgrade' output:
Setting up apparmor (4.0.1really4.0.1-0ubuntu0.24.04.9) ...
Installing new version of config file /etc/apparmor.d/transmission ...
/var/lib/dpkg/info/apparmor.postinst: 148: [: Illegal number: yes
Reloading AppArmor profiles
# journalctl -eu apparmor
Oct 28 13:42:48 boxname systemd[1]: Stopped apparmor.service - Load AppArmor
profiles.
Oct 28 13:42:56 boxname systemd[1]: Starting apparmor.service - Load AppArmor
profiles...
Oct 28 13:42:56 boxname apparmor.systemd[134679]: Restarting AppArmor
Oct 28 13:42:56 boxname apparmor.systemd[134679]:
/lib/apparmor/apparmor.systemd: 148: [: Illegal number: yes
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Oct 28 13:42:56 boxname apparmor.systemd[134679]: Reloading AppArmor profiles
Oct 28 13:42:56 boxname apparmor.systemd[134792]: Warning: found usr.sbin.sssd
in /etc/apparmor.d/force-complain, forcing complain mode
Oct 28 13:42:56 boxname apparmor.systemd[134792]: Warning from /etc/apparmor.d
(/etc/apparmor.d/usr.sbin.sssd line 69): Caching disabled for: 'usr.sbin.sssd'
due to force complain
Oct 28 13:42:56 boxname systemd[1]: Finished apparmor.service - Load AppArmor
profiles.
#
Lines 146 to 148 of /usr/lib/apparmor/rc.apparmor.functions are:
unconfined_userns=$([ -f
/sys/kernel/security/apparmor/features/policy/unconfined_restrictions/userns ]
&& cat
/sys/kernel/security/apparmor/features/policy/unconfined_restrictions/userns ||
echo 0)
if [ -n "$userns_restricted" ] && [ "$userns_restricted" -eq 1 ]; then
if [ "$unconfined_userns" -eq 0 ]; then
This is the file from line 146:
# cat
/sys/kernel/security/apparmor/features/policy/unconfined_restrictions/userns
yes
#
So the problem is still that the userns file contains "yes" while the 'if'
statement expects 1/0.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2102680
Title:
Installation of AppArmor on a 6.14 kernel produces error message
"Illegal number: yes"
To manage notifications about this bug go to:
https://bugs.launchpad.net/apparmor/+bug/2102680/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
