test_250_config_security_perf_events_restrict in kernel security test failed with 4.15 KVM kernel
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
ubuntu-kernel-tests |
Fix Released
|
Undecided
|
Po-Hsu Lin | ||
linux-kvm (Ubuntu) |
Fix Released
|
Undecided
|
Po-Hsu Lin | ||
Bionic |
Fix Released
|
Undecided
|
Unassigned |
Bug Description
== Justification ==
In the Bionic KVM kernel, the CONFIG_
CONFIG_
meet the security team's requirement.
== Test ==
Before enabling the config, test case test_190_
test_250_
security testsuite for the kernel SRU regression test.
It will pass with these two patches applied, tested on a KVM node.
== Fix ==
Set CONFIG_
Set CONFIG_
== Regression Potential ==
Minimal.
No code changes, just two config changes without disabling any other configs.
BugLink: https:/
BugLink: https:/
-------
test_250_
FAIL: test_250_
Ensure CONFIG_
-----
Traceback (most recent call last):
File "./test-
self.
AssertionError: True != False
The CONFIG_
$ cat /boot/config-
# CONFIG_
ProblemType: Bug
DistroRelease: Ubuntu 18.04
Package: linux-image-
ProcVersionSign
Uname: Linux 4.15.0-1008-kvm x86_64
NonfreeKernelMo
ApportVersion: 2.20.9-0ubuntu7
Architecture: amd64
Date: Wed Apr 25 04:41:49 2018
ProcEnviron:
TERM=xterm-
PATH=(custom, no user)
XDG_RUNTIME_
LANG=C.UTF-8
SHELL=/bin/bash
SourcePackage: linux-kvm
UpgradeStatus: No upgrade log present (probably fresh install)
Changed in linux-kvm (Ubuntu): | |
assignee: | nobody → Po-Hsu Lin (cypressyew) |
Changed in ubuntu-kernel-tests: | |
assignee: | nobody → Po-Hsu Lin (cypressyew) |
no longer affects: | qa-regression-testing |
Changed in ubuntu-kernel-tests: | |
status: | New → In Progress |
Changed in linux-kvm (Ubuntu): | |
status: | New → In Progress |
description: | updated |
Changed in linux-kvm (Ubuntu): | |
status: | In Progress → Fix Committed |
Changed in ubuntu-kernel-tests: | |
status: | In Progress → Fix Committed |
Changed in linux-kvm (Ubuntu Bionic): | |
status: | New → Fix Committed |
Changed in ubuntu-kernel-tests: | |
status: | Fix Committed → Fix Released |
A test kernel could be found here (along with the patch for bug 1766774: people. canonical. com/~phlin/ kernel/ lp-1766774- 1766780/
http://