Public bug reported:
Shipping images with preseeded snaps currently relies on a somewhat
absurd sequence of events:
1. someone commits a copy of /sys/kernel/security/apparmor/features for the
kernel from that series to livecd-rootfs
2. livecd-rootfs bind mounts this over the actual
/sys/kernel/security/apparmor/features directory before calling snap-preseed
3. snap-preseed bind mounts this into the chroot before doing the preseeding
None of this really makes sense given that apparmor_parser has a
--kernel-features flag. But we can skip the first bit if we can find the
supported apparmor features from a kernel by looking in a file. I guess
this is easiest if it's installed by the linux-image package (i assume
it's not a lot of data) but it could be a different package too.
** Affects: linux (Ubuntu)
Importance: Undecided
Assignee: Timo Aaltonen (tjaalton)
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2172908
Title:
please include apparmor feature information in a package
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2172908/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
