Bugs : AppArmor

AppArmor

Undecided

New

#1615878 __label_update proxy comparison test is wrong

AppArmor 6

Undecided

New

#1615880 The inherit check for new to old label comparison for domain transitions is wrong

AppArmor 6

Undecided

New

#1615881 The label build for onexec when stacking is wrong

AppArmor 6

Undecided

New

#1615882 dfa is missing a bounds check which can cause an oops

AppArmor 6

Undecided

New

#1615885 vmalloc_addr is being checked on the failed return address of kvzalloc()

AppArmor 6

Undecided

New

#1615887 profiles from different namespaces can block other namespaces from being able to load a profile

AppArmor 6

Undecided

New

#1615889 label vec reductions can result in reference labels instead of direct access to labels

AppArmor 6

Undecided

New

#1615890 stacking to unconfined in a child namespace confuses mediation

AppArmor 6

Undecided

New

#1615892 deleted files outside of the namespace are not being treated as disconnected

AppArmor 6

Undecided

New

#1615893 change_hat is logging failures during expected hat probing

AppArmor 6

Undecided

New

#1615895 apparmor module parameters can be changed after the policy is locked

AppArmor 6

Undecided

In Progress

#1648903 Permission denied and inconsistent behavior in complain mode with 'ip netns list' command

AppArmor 6

Undecided

Confirmed

#1656121 unexpected errno=13 and disconnected path when trying to open /proc/1/ns/mnt from a unshared mount namespace

AppArmor 16

Report a bug

Bug supervisor:: None set

Series-targeted bugs

1 2.11
1 2.12
2 2.6
2 2.9