Bug#1050256: AppArmor breaks locking non-fs Unix sockets

Path	csiph.com!pasdenom.info!weretis.net!feeder8.news.weretis.net!srl.newsdeef.eu!news.corradoroberto.it!gothmog.csi.it!bofh.it!news.nic.it!robomod
From	Salvatore Bonaccorso <carnil@debian.org>
Newsgroups	linux.debian.bugs.dist, linux.debian.kernel
Subject	Bug#1050256: AppArmor breaks locking non-fs Unix sockets
Date	Sat, 14 Jun 2025 22:10:01 +0200
Message-ID	<KXFmp-azUr-5@gated-at.bofh.it> (permalink)
References	<H5AeZ-3Dvv-9@gated-at.bofh.it> <IGB9U-eTji-9@gated-at.bofh.it> <H5AeZ-3Dvv-9@gated-at.bofh.it> <IIkxX-fXtb-3@gated-at.bofh.it> <H5AeZ-3Dvv-9@gated-at.bofh.it> <J7sLD-2urX-3@gated-at.bofh.it> <H5AeZ-3Dvv-9@gated-at.bofh.it> <JOgz7-czTl-11@gated-at.bofh.it> <H5AeZ-3Dvv-9@gated-at.bofh.it> <KtceB-7X9v-1@gated-at.bofh.it> <H5AeZ-3Dvv-9@gated-at.bofh.it> <KtceB-7X9v-1@gated-at.bofh.it>
X-Mailbox-Line	From debian-bugs-dist-request@lists.debian.org Sat Jun 14 20:07:07 2025
Old-Return-Path	<debbugs@buxtehude.debian.org>
X-Spam-Flag	NO
X-Spam-Score	-3.999
Reply-To	Salvatore Bonaccorso <carnil@debian.org>, 1050256@bugs.debian.org
Resent-To	debian-bugs-dist@lists.debian.org
Resent-Cc	Debian Kernel Team <debian-kernel@lists.debian.org>
X-Debian-Pr-Message	followup 1050256
X-Debian-Pr-Package	src:linux
X-Debian-Pr-Keywords	experimental bookworm upstream trixie confirmed sid
X-Debian-Pr-Source	linux
MIME-Version	1.0
Content-Type	text/plain; charset=us-ascii
Content-Disposition	inline
X-Debian-User	carnil
X-Debian-Message	from BTS
X-Mailing-List	<debian-bugs-dist@lists.debian.org> archive/latest/1910062
List-ID	<debian-bugs-dist.lists.debian.org>
List-URL	<https://lists.debian.org/debian-bugs-dist/>
Approved	robomod@news.nic.it
Lines	59
Organization	linux.* mail to news gateway
Sender	robomod@news.nic.it
X-Original-Cc	Mathias Gibbens <gibmat@debian.org>, John Johansen <john@apparmor.net>, Paul Gevers <elbrus@debian.org>, Antonio Terceiro <terceiro@debian.org>, pkg-systemd-maintainers <pkg-systemd-maintainers@lists.alioth.debian.org>, apparmor@lists.ubuntu.com, Harald Dunkel <harri@afaics.de>
X-Original-Date	Sat, 14 Jun 2025 22:04:21 +0200
X-Original-Message-ID	<aE3Vxepz_y6vXpqM@eldamar.lan>
X-Original-References	<169271330498.34427.2191706613553030083.reportbug@pluto.milchstrasse.xx> <ZbYk7yOaAq0O8Rid@eldamar.lan> <169271330498.34427.2191706613553030083.reportbug@pluto.milchstrasse.xx> <ZlMfW3I6dcpn2nAv@eldamar.lan> <169271330498.34427.2191706613553030083.reportbug@pluto.milchstrasse.xx> <Zq6GfWwlD2oqu2BW@eldamar.lan> <169271330498.34427.2191706613553030083.reportbug@pluto.milchstrasse.xx> <Z0ouVKC_dZDIOWeX@eldamar.lan> <169271330498.34427.2191706613553030083.reportbug@pluto.milchstrasse.xx> <Z98HhbGvHghlHP_x@eldamar.lan> <169271330498.34427.2191706613553030083.reportbug@pluto.milchstrasse.xx> <Z98HhbGvHghlHP_x@eldamar.lan>
Xref	csiph.com linux.debian.bugs.dist:1250024 linux.debian.kernel:87980

Cross-posted to 2 groups.

Show key headers only | View raw

On Sat, Mar 22, 2025 at 07:55:01PM +0100, Salvatore Bonaccorso wrote:
> Hi John,
> 
> On Fri, Nov 29, 2024 at 10:12:52PM +0100, Salvatore Bonaccorso wrote:
> > Hi John,
> > 
> > On Sat, Aug 03, 2024 at 09:35:25PM +0200, Salvatore Bonaccorso wrote:
> > > Hi John,
> > > 
> > > On Sun, May 26, 2024 at 01:39:07PM +0200, Salvatore Bonaccorso wrote:
> > > > Hi,
> > > > 
> > > > For those watching this bug: John has prepared backports in his tree,
> > > > with both approaches:
> > > > 
> > > > https://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor.git/log/?h=debian-two-patch-1780227
> > > > 
> > > > and
> > > > 
> > > > https://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor.git/log/?h=debian-backport-1780227
> > > > 
> > > > (but with the open question which one will be submitted for stable.
> > > > >From upstream stable point of view probably the two patch backport
> > > > approach would be the preferred one).
> > > 
> > > We still have tis issue open for 6.1.y upstream TTBOMK. If you are
> > > confident as maintainer with any of the two approaches, would it be
> > > possible to submit them for stable? If the preferred one get then
> > > accepted and queued, we might already cherry-pick the solution for us,
> > > but at this point we can wait for the respective 6.1.y stable version
> > > which will include the fix.
> > 
> > Friendly ping. Any news here?
> 
> Anything we can do there to help on the decision which set of fixes
> could land in the 6.1.y stable series? Would it help if I prod Mathias
> to test both variants for feedback? 
> 
> Or is there a problem you envision already by trying to backport those
> fixes to upstream 6.1.y?
> 
> Thanks for your work, and sorry for pestering you again about it :(

Any news on this?

While at it, I noticed that in the above commits for
https://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor.git/log/?h=debian-two-patch-1780227
or
https://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor.git/log/?h=debian-backport-1780227

it might be worth adding a

Link: https://bugs.debian.org/1050256

Do you see any problems with any of the both you prepared? If not, is
there soemthing which you miss from us downstream?

Regards,
Salvatore

Back to linux.debian.kernel | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Bug#1050256: AppArmor breaks locking non-fs Unix sockets Salvatore Bonaccorso <carnil@debian.org> - 2023-12-06 23:00 +0100
  Bug#1050256: AppArmor breaks locking non-fs Unix sockets Salvatore Bonaccorso <carnil@debian.org> - 2023-12-30 16:50 +0100
    Bug#1050256: AppArmor breaks locking non-fs Unix sockets Salvatore Bonaccorso <carnil@debian.org> - 2024-01-27 10:30 +0100
    Bug#1050256: AppArmor breaks locking non-fs Unix sockets Luca Boccassi <bluca@debian.org> - 2024-05-21 19:10 +0200
    Bug#1050256: AppArmor breaks locking non-fs Unix sockets Salvatore Bonaccorso <carnil@debian.org> - 2024-05-26 13:50 +0200
      Bug#1050256: AppArmor breaks locking non-fs Unix sockets Luca Boccassi <bluca@debian.org> - 2024-05-26 18:10 +0200
      Bug#1050256: AppArmor breaks locking non-fs Unix sockets Salvatore Bonaccorso <carnil@debian.org> - 2024-08-03 21:40 +0200
        Bug#1050256: AppArmor breaks locking non-fs Unix sockets Salvatore Bonaccorso <carnil@debian.org> - 2024-11-29 22:20 +0100
          Bug#1050256: AppArmor breaks locking non-fs Unix sockets Salvatore Bonaccorso <carnil@debian.org> - 2025-03-22 20:00 +0100
            Bug#1050256: AppArmor breaks locking non-fs Unix sockets Salvatore Bonaccorso <carnil@debian.org> - 2025-06-14 22:10 +0200

csiph-web