Ubuntu
maas-provision package

apparmor profile is disabled on install, but should be enabled

Bug #987265 reported by Jamie Strandboge on 2012-04-23

This bug affects 1 person

Affects		Status	Importance	Assigned to	Milestone
	maas-provision (Ubuntu)	Fix Released	High	Jamie Strandboge
	Precise	Fix Released	High	Jamie Strandboge

Bug Description

While maas-provision ships an apparmor profile for cobller, it is disabled by default. It should be shipped enabled to ease the maintenance burden and to meet the maas-provision MIR requirements.

Tags:

Related branches

lp://staging/ubuntu/precise-proposed/maas-provision

Jamie Strandboge (jdstrand) on 2012-04-23

Changed in maas-provision (Ubuntu Precise):
importance:	Undecided → High
status:	New → Triaged

Jamie Strandboge (jdstrand) on 2012-04-23

Changed in maas-provision (Ubuntu Precise):
assignee:	nobody → Dave Walker (davewalker)

Revision history for this message

Jamie Strandboge (jdstrand) wrote on 2012-04-23:

maas-provision_2.2.2-0ubuntu3.debdiff Edit (3.0 KiB, text/plain)

Ok, I uploaded to precise-proposed the fix for this and bug #987293 (debdiff attached). I tested on new install, upgrade from 2.2.2-0ubuntu2 and upgrade from cobbler. In all situations, the profile is enabled on install.

Changed in maas-provision (Ubuntu Precise):
assignee:	Dave Walker (davewalker) → Jamie Strandboge (jdstrand)
status:	Triaged → Fix Committed

Ubuntu Foundations Team Bug Bot (crichton) on 2012-04-23

tags:

added: patch

Revision history for this message

Launchpad Janitor (janitor) wrote on 2012-04-23:

This bug was fixed in the package maas-provision - 2.2.2-0ubuntu4

---------------
maas-provision (2.2.2-0ubuntu4) precise-proposed; urgency=low

  * Update apparmor profile, fixes denials when running
    maas-import-isos (LP: #987374)
  * 72_ubuntu_copy_boot_nohardlink.patch: Do not hardlink files from /boot/
    only copy them as it might impose a security vulnerability.
-- Andres Rodriguez <email address hidden> Mon, 23 Apr 2012 16:41:10 -0400