Bug#990089: linux-image-4.19.0-17-amd64: lxc-attach fails with Failed to set AppArmor label unconfined

From	Gmail <mark.alistair.grant@gmail.com>
Newsgroups	linux.debian.bugs.dist, linux.debian.kernel
Subject	Bug#990089: linux-image-4.19.0-17-amd64: lxc-attach fails with Failed to set AppArmor label unconfined
Date	2021-06-21 11:30 +0200
Message-ID	<CsopH-2Tt-1@gated-at.bofh.it> (permalink)
References	<Cs2fv-6nI-1@gated-at.bofh.it> <CsaG5-32S-1@gated-at.bofh.it> <Cs2fv-6nI-1@gated-at.bofh.it> <CsaG5-32S-1@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Cross-posted to 2 groups.

Show all headers | View raw

Salvatore,

On Sun, 2021-06-20 at 20:39 +0200, Salvatore Bonaccorso wrote:
> Hi Mark,
> 
> On Sun, Jun 20, 2021 at 10:44:29AM +0100, Mark Grant wrote:
> > Package: src:linux
> > Version: 4.19.194-1
> > Severity: normal
> > 
> > Dear Maintainer,
> > 
> > After upgrading from linux-image-4.19.0-16-amd64 to linux-image-
> > 4.19.0-17-amd64
> > attaching an unprivileged linux container fails with the message:
> > lxc-attach: debian-buster-amd64-basic: lsm/lsm.c:
> > lsm_process_label_set_at: 174
> > Operation not permitted - Failed to set AppArmor label "unconfined"
> > Rebooting into linux-image-4.19.0-16-amd64 with no other changes,
> > the lxc
> > system works as expected.
> 
> I think this is the same issue as in #990072, would you be able to
> test the patch as commited
> https://salsa.debian.org/kernel-team/linux/-/commit/d3fc7c8514bed949d8797cfd3a50a1bed95629c0
> ?
> 
I can confirm that the patch fixed the problem. Many thanks.

Regards,
Mark

> Regards,
> Salvatore

Back to linux.debian.kernel | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Bug#990089: linux-image-4.19.0-17-amd64: lxc-attach fails with Failed to set AppArmor label unconfined Mark Grant <mark.alistair.grant@gmail.com> - 2021-06-20 11:50 +0200
  Bug#990089: linux-image-4.19.0-17-amd64: lxc-attach fails with Failed to set AppArmor label unconfined Salvatore Bonaccorso <carnil@debian.org> - 2021-06-20 20:50 +0200
    Bug#990089: linux-image-4.19.0-17-amd64: lxc-attach fails with Failed to set AppArmor label unconfined Gmail <mark.alistair.grant@gmail.com> - 2021-06-21 11:30 +0200

csiph-web