[Bug 2028253] Re: update apparmor and LSM stacking patch set

This bug is awaiting verification that the linux-gke/6.8.0-1004.7 kernel
in -proposed solves the problem. Please test the kernel and update this
bug with the results. If the problem is solved, change the tag
'verification-needed-noble-linux-gke' to 'verification-done-noble-linux-
gke'. If the problem still exists, change the tag 'verification-needed-
noble-linux-gke' to 'verification-failed-noble-linux-gke'.


If verification is not done by 5 working days from today, this fix will
be dropped from the source code, and this bug will be closed.


See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how
to enable and use -proposed. Thank you!


** Tags added: kernel-spammed-noble-linux-gke-v2 verification-needed-noble-linux-gke

--
You received this bug notification because you are subscribed to linux
in Ubuntu.
Matching subscriptions: Bgg, Bmail, Nb
https://bugs.launchpad.net/bugs/2028253

Title:
update apparmor and LSM stacking patch set

Status in linux package in Ubuntu:
Fix Released
Status in linux source package in Mantic:
Fix Released
Status in linux source package in Noble:
Fix Released

Bug description:
[Impact]

Provide an updated patch set for apparmor / LSM stacking with all the
custom features that we need in the Ubuntu kernel.

This patch set is required to provide the proper confinement with
snaps and other Ubuntu-specific security features.

[Fix]

Apply the latest updated patch set from:

 https://gitlab.com/jjohansen/apparmor-kernel

[Test case]

Run the apparmor test case suite.

[Regression potential]

This patch set introduces significant non-upstream changes to the
security layer, so we may expect generic regressions in the kernel,
especially running applications that are stressing the security layer
(such as systemd, snapd, lxd, etc.).

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2028253/+subscriptions