diff -Nru livecd-rootfs-2.765.23/debian/changelog livecd-rootfs-2.765.24/debian/changelog --- livecd-rootfs-2.765.23/debian/changelog 2023-05-23 14:40:34.000000000 +0000 +++ livecd-rootfs-2.765.24/debian/changelog 2023-08-18 21:54:34.000000000 +0000 @@ -1,3 +1,14 @@ +livecd-rootfs (2.765.24) jammy; urgency=medium + + [ Jess Jang ] + * fix: bind correct apparmor feature for validating snap seed. + (LP: #2024639) + + [ John Chittum ] + * fix: 6.2 kernel missing feature. (LP: #2031943) + + -- Utkarsh Gupta Sat, 19 Aug 2023 03:24:34 +0530 + livecd-rootfs (2.765.23) jammy; urgency=medium [ Loïc Minier ] diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/5.19/capability livecd-rootfs-2.765.24/live-build/apparmor/5.19/capability --- livecd-rootfs-2.765.23/live-build/apparmor/5.19/capability 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/5.19/capability 2023-08-18 21:54:28.000000000 +0000 @@ -0,0 +1 @@ +0xffffff diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/5.19/caps/mask livecd-rootfs-2.765.24/live-build/apparmor/5.19/caps/mask --- livecd-rootfs-2.765.23/live-build/apparmor/5.19/caps/mask 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/5.19/caps/mask 2023-08-18 21:54:28.000000000 +0000 @@ -0,0 +1 @@ +chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap mac_override mac_admin syslog wake_alarm block_suspend audit_read diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/5.19/dbus/mask livecd-rootfs-2.765.24/live-build/apparmor/5.19/dbus/mask --- livecd-rootfs-2.765.23/live-build/apparmor/5.19/dbus/mask 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/5.19/dbus/mask 2023-08-18 21:54:28.000000000 +0000 @@ -0,0 +1 @@ +acquire send receive diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/5.19/domain/attach_conditions/xattr livecd-rootfs-2.765.24/live-build/apparmor/5.19/domain/attach_conditions/xattr --- livecd-rootfs-2.765.23/live-build/apparmor/5.19/domain/attach_conditions/xattr 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/5.19/domain/attach_conditions/xattr 2023-08-18 21:54:28.000000000 +0000 @@ -0,0 +1 @@ +yes diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/5.19/domain/change_hat livecd-rootfs-2.765.24/live-build/apparmor/5.19/domain/change_hat --- livecd-rootfs-2.765.23/live-build/apparmor/5.19/domain/change_hat 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/5.19/domain/change_hat 2023-08-18 21:54:28.000000000 +0000 @@ -0,0 +1 @@ +yes diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/5.19/domain/change_hatv livecd-rootfs-2.765.24/live-build/apparmor/5.19/domain/change_hatv --- livecd-rootfs-2.765.23/live-build/apparmor/5.19/domain/change_hatv 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/5.19/domain/change_hatv 2023-08-18 21:54:28.000000000 +0000 @@ -0,0 +1 @@ +yes diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/5.19/domain/change_onexec livecd-rootfs-2.765.24/live-build/apparmor/5.19/domain/change_onexec --- livecd-rootfs-2.765.23/live-build/apparmor/5.19/domain/change_onexec 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/5.19/domain/change_onexec 2023-08-18 21:54:28.000000000 +0000 @@ -0,0 +1 @@ +yes diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/5.19/domain/change_profile livecd-rootfs-2.765.24/live-build/apparmor/5.19/domain/change_profile --- livecd-rootfs-2.765.23/live-build/apparmor/5.19/domain/change_profile 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/5.19/domain/change_profile 2023-08-18 21:54:28.000000000 +0000 @@ -0,0 +1 @@ +yes diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/5.19/domain/computed_longest_left livecd-rootfs-2.765.24/live-build/apparmor/5.19/domain/computed_longest_left --- livecd-rootfs-2.765.23/live-build/apparmor/5.19/domain/computed_longest_left 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/5.19/domain/computed_longest_left 2023-08-18 21:54:28.000000000 +0000 @@ -0,0 +1 @@ +yes diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/5.19/domain/fix_binfmt_elf_mmap livecd-rootfs-2.765.24/live-build/apparmor/5.19/domain/fix_binfmt_elf_mmap --- livecd-rootfs-2.765.23/live-build/apparmor/5.19/domain/fix_binfmt_elf_mmap 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/5.19/domain/fix_binfmt_elf_mmap 2023-08-18 21:54:28.000000000 +0000 @@ -0,0 +1 @@ +yes diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/5.19/domain/post_nnp_subset livecd-rootfs-2.765.24/live-build/apparmor/5.19/domain/post_nnp_subset --- livecd-rootfs-2.765.23/live-build/apparmor/5.19/domain/post_nnp_subset 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/5.19/domain/post_nnp_subset 2023-08-18 21:54:28.000000000 +0000 @@ -0,0 +1 @@ +yes diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/5.19/domain/stack livecd-rootfs-2.765.24/live-build/apparmor/5.19/domain/stack --- livecd-rootfs-2.765.23/live-build/apparmor/5.19/domain/stack 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/5.19/domain/stack 2023-08-18 21:54:28.000000000 +0000 @@ -0,0 +1 @@ +yes diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/5.19/domain/version livecd-rootfs-2.765.24/live-build/apparmor/5.19/domain/version --- livecd-rootfs-2.765.23/live-build/apparmor/5.19/domain/version 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/5.19/domain/version 2023-08-18 21:54:28.000000000 +0000 @@ -0,0 +1 @@ +1.2 diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/5.19/file/mask livecd-rootfs-2.765.24/live-build/apparmor/5.19/file/mask --- livecd-rootfs-2.765.23/live-build/apparmor/5.19/file/mask 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/5.19/file/mask 2023-08-18 21:54:28.000000000 +0000 @@ -0,0 +1 @@ +create read write exec append mmap_exec link lock diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/5.19/mount/mask livecd-rootfs-2.765.24/live-build/apparmor/5.19/mount/mask --- livecd-rootfs-2.765.23/live-build/apparmor/5.19/mount/mask 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/5.19/mount/mask 2023-08-18 21:54:28.000000000 +0000 @@ -0,0 +1 @@ +mount umount pivot_root diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/5.19/namespaces/pivot_root livecd-rootfs-2.765.24/live-build/apparmor/5.19/namespaces/pivot_root --- livecd-rootfs-2.765.23/live-build/apparmor/5.19/namespaces/pivot_root 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/5.19/namespaces/pivot_root 2023-08-18 21:54:28.000000000 +0000 @@ -0,0 +1 @@ +no diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/5.19/namespaces/profile livecd-rootfs-2.765.24/live-build/apparmor/5.19/namespaces/profile --- livecd-rootfs-2.765.23/live-build/apparmor/5.19/namespaces/profile 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/5.19/namespaces/profile 2023-08-18 21:54:28.000000000 +0000 @@ -0,0 +1 @@ +yes diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/5.19/network/af_mask livecd-rootfs-2.765.24/live-build/apparmor/5.19/network/af_mask --- livecd-rootfs-2.765.23/live-build/apparmor/5.19/network/af_mask 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/5.19/network/af_mask 2023-08-18 21:54:28.000000000 +0000 @@ -0,0 +1 @@ +unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/5.19/network/af_unix livecd-rootfs-2.765.24/live-build/apparmor/5.19/network/af_unix --- livecd-rootfs-2.765.23/live-build/apparmor/5.19/network/af_unix 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/5.19/network/af_unix 2023-08-18 21:54:28.000000000 +0000 @@ -0,0 +1 @@ +yes diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/5.19/network_v8/af_mask livecd-rootfs-2.765.24/live-build/apparmor/5.19/network_v8/af_mask --- livecd-rootfs-2.765.23/live-build/apparmor/5.19/network_v8/af_mask 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/5.19/network_v8/af_mask 2023-08-18 21:54:28.000000000 +0000 @@ -0,0 +1 @@ +unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/5.19/policy/set_load livecd-rootfs-2.765.24/live-build/apparmor/5.19/policy/set_load --- livecd-rootfs-2.765.23/live-build/apparmor/5.19/policy/set_load 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/5.19/policy/set_load 2023-08-18 21:54:28.000000000 +0000 @@ -0,0 +1 @@ +yes diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/5.19/policy/versions/v5 livecd-rootfs-2.765.24/live-build/apparmor/5.19/policy/versions/v5 --- livecd-rootfs-2.765.23/live-build/apparmor/5.19/policy/versions/v5 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/5.19/policy/versions/v5 2023-08-18 21:54:28.000000000 +0000 @@ -0,0 +1 @@ +yes diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/5.19/policy/versions/v6 livecd-rootfs-2.765.24/live-build/apparmor/5.19/policy/versions/v6 --- livecd-rootfs-2.765.23/live-build/apparmor/5.19/policy/versions/v6 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/5.19/policy/versions/v6 2023-08-18 21:54:28.000000000 +0000 @@ -0,0 +1 @@ +yes diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/5.19/policy/versions/v7 livecd-rootfs-2.765.24/live-build/apparmor/5.19/policy/versions/v7 --- livecd-rootfs-2.765.23/live-build/apparmor/5.19/policy/versions/v7 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/5.19/policy/versions/v7 2023-08-18 21:54:28.000000000 +0000 @@ -0,0 +1 @@ +yes diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/5.19/policy/versions/v8 livecd-rootfs-2.765.24/live-build/apparmor/5.19/policy/versions/v8 --- livecd-rootfs-2.765.23/live-build/apparmor/5.19/policy/versions/v8 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/5.19/policy/versions/v8 2023-08-18 21:54:28.000000000 +0000 @@ -0,0 +1 @@ +yes diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/5.19/ptrace/mask livecd-rootfs-2.765.24/live-build/apparmor/5.19/ptrace/mask --- livecd-rootfs-2.765.23/live-build/apparmor/5.19/ptrace/mask 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/5.19/ptrace/mask 2023-08-18 21:54:28.000000000 +0000 @@ -0,0 +1 @@ +read trace diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/5.19/query/label/data livecd-rootfs-2.765.24/live-build/apparmor/5.19/query/label/data --- livecd-rootfs-2.765.23/live-build/apparmor/5.19/query/label/data 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/5.19/query/label/data 2023-08-18 21:54:28.000000000 +0000 @@ -0,0 +1 @@ +yes diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/5.19/query/label/multi_transaction livecd-rootfs-2.765.24/live-build/apparmor/5.19/query/label/multi_transaction --- livecd-rootfs-2.765.23/live-build/apparmor/5.19/query/label/multi_transaction 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/5.19/query/label/multi_transaction 2023-08-18 21:54:28.000000000 +0000 @@ -0,0 +1 @@ +yes diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/5.19/query/label/perms livecd-rootfs-2.765.24/live-build/apparmor/5.19/query/label/perms --- livecd-rootfs-2.765.23/live-build/apparmor/5.19/query/label/perms 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/5.19/query/label/perms 2023-08-18 21:54:28.000000000 +0000 @@ -0,0 +1 @@ +allow deny audit quiet diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/5.19/rlimit/mask livecd-rootfs-2.765.24/live-build/apparmor/5.19/rlimit/mask --- livecd-rootfs-2.765.23/live-build/apparmor/5.19/rlimit/mask 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/5.19/rlimit/mask 2023-08-18 21:54:28.000000000 +0000 @@ -0,0 +1 @@ +cpu fsize data stack core rss nproc nofile memlock as locks sigpending msgqueue nice rtprio rttime diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/5.19/signal/mask livecd-rootfs-2.765.24/live-build/apparmor/5.19/signal/mask --- livecd-rootfs-2.765.23/live-build/apparmor/5.19/signal/mask 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/5.19/signal/mask 2023-08-18 21:54:28.000000000 +0000 @@ -0,0 +1 @@ +hup int quit ill trap abrt bus fpe kill usr1 segv usr2 pipe alrm term stkflt chld cont stop stp ttin ttou urg xcpu xfsz vtalrm prof winch io pwr sys emt lost diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/6.2/capability livecd-rootfs-2.765.24/live-build/apparmor/6.2/capability --- livecd-rootfs-2.765.23/live-build/apparmor/6.2/capability 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/6.2/capability 2023-08-18 21:54:22.000000000 +0000 @@ -0,0 +1 @@ +0xffffff diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/6.2/caps/mask livecd-rootfs-2.765.24/live-build/apparmor/6.2/caps/mask --- livecd-rootfs-2.765.23/live-build/apparmor/6.2/caps/mask 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/6.2/caps/mask 2023-08-18 21:54:22.000000000 +0000 @@ -0,0 +1 @@ +chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap mac_override mac_admin syslog wake_alarm block_suspend audit_read diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/6.2/dbus/mask livecd-rootfs-2.765.24/live-build/apparmor/6.2/dbus/mask --- livecd-rootfs-2.765.23/live-build/apparmor/6.2/dbus/mask 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/6.2/dbus/mask 2023-08-18 21:54:22.000000000 +0000 @@ -0,0 +1 @@ +acquire send receive diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/6.2/domain/attach_conditions/xattr livecd-rootfs-2.765.24/live-build/apparmor/6.2/domain/attach_conditions/xattr --- livecd-rootfs-2.765.23/live-build/apparmor/6.2/domain/attach_conditions/xattr 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/6.2/domain/attach_conditions/xattr 2023-08-18 21:54:22.000000000 +0000 @@ -0,0 +1 @@ +yes diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/6.2/domain/change_hat livecd-rootfs-2.765.24/live-build/apparmor/6.2/domain/change_hat --- livecd-rootfs-2.765.23/live-build/apparmor/6.2/domain/change_hat 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/6.2/domain/change_hat 2023-08-18 21:54:22.000000000 +0000 @@ -0,0 +1 @@ +yes diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/6.2/domain/change_hatv livecd-rootfs-2.765.24/live-build/apparmor/6.2/domain/change_hatv --- livecd-rootfs-2.765.23/live-build/apparmor/6.2/domain/change_hatv 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/6.2/domain/change_hatv 2023-08-18 21:54:22.000000000 +0000 @@ -0,0 +1 @@ +yes diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/6.2/domain/change_onexec livecd-rootfs-2.765.24/live-build/apparmor/6.2/domain/change_onexec --- livecd-rootfs-2.765.23/live-build/apparmor/6.2/domain/change_onexec 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/6.2/domain/change_onexec 2023-08-18 21:54:22.000000000 +0000 @@ -0,0 +1 @@ +yes diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/6.2/domain/change_profile livecd-rootfs-2.765.24/live-build/apparmor/6.2/domain/change_profile --- livecd-rootfs-2.765.23/live-build/apparmor/6.2/domain/change_profile 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/6.2/domain/change_profile 2023-08-18 21:54:22.000000000 +0000 @@ -0,0 +1 @@ +yes diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/6.2/domain/computed_longest_left livecd-rootfs-2.765.24/live-build/apparmor/6.2/domain/computed_longest_left --- livecd-rootfs-2.765.23/live-build/apparmor/6.2/domain/computed_longest_left 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/6.2/domain/computed_longest_left 2023-08-18 21:54:22.000000000 +0000 @@ -0,0 +1 @@ +yes diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/6.2/domain/fix_binfmt_elf_mmap livecd-rootfs-2.765.24/live-build/apparmor/6.2/domain/fix_binfmt_elf_mmap --- livecd-rootfs-2.765.23/live-build/apparmor/6.2/domain/fix_binfmt_elf_mmap 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/6.2/domain/fix_binfmt_elf_mmap 2023-08-18 21:54:22.000000000 +0000 @@ -0,0 +1 @@ +yes diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/6.2/domain/post_nnp_subset livecd-rootfs-2.765.24/live-build/apparmor/6.2/domain/post_nnp_subset --- livecd-rootfs-2.765.23/live-build/apparmor/6.2/domain/post_nnp_subset 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/6.2/domain/post_nnp_subset 2023-08-18 21:54:22.000000000 +0000 @@ -0,0 +1 @@ +yes diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/6.2/domain/stack livecd-rootfs-2.765.24/live-build/apparmor/6.2/domain/stack --- livecd-rootfs-2.765.23/live-build/apparmor/6.2/domain/stack 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/6.2/domain/stack 2023-08-18 21:54:22.000000000 +0000 @@ -0,0 +1 @@ +yes diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/6.2/domain/version livecd-rootfs-2.765.24/live-build/apparmor/6.2/domain/version --- livecd-rootfs-2.765.23/live-build/apparmor/6.2/domain/version 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/6.2/domain/version 2023-08-18 21:54:22.000000000 +0000 @@ -0,0 +1 @@ +1.2 diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/6.2/file/mask livecd-rootfs-2.765.24/live-build/apparmor/6.2/file/mask --- livecd-rootfs-2.765.23/live-build/apparmor/6.2/file/mask 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/6.2/file/mask 2023-08-18 21:54:22.000000000 +0000 @@ -0,0 +1 @@ +create read write exec append mmap_exec link lock diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/6.2/ipc/posix_mqueue livecd-rootfs-2.765.24/live-build/apparmor/6.2/ipc/posix_mqueue --- livecd-rootfs-2.765.23/live-build/apparmor/6.2/ipc/posix_mqueue 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/6.2/ipc/posix_mqueue 2023-08-18 21:54:22.000000000 +0000 @@ -0,0 +1 @@ +create read write open delete setattr getattr diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/6.2/mount/mask livecd-rootfs-2.765.24/live-build/apparmor/6.2/mount/mask --- livecd-rootfs-2.765.23/live-build/apparmor/6.2/mount/mask 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/6.2/mount/mask 2023-08-18 21:54:22.000000000 +0000 @@ -0,0 +1 @@ +mount umount pivot_root diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/6.2/namespaces/pivot_root livecd-rootfs-2.765.24/live-build/apparmor/6.2/namespaces/pivot_root --- livecd-rootfs-2.765.23/live-build/apparmor/6.2/namespaces/pivot_root 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/6.2/namespaces/pivot_root 2023-08-18 21:54:22.000000000 +0000 @@ -0,0 +1 @@ +no diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/6.2/namespaces/profile livecd-rootfs-2.765.24/live-build/apparmor/6.2/namespaces/profile --- livecd-rootfs-2.765.23/live-build/apparmor/6.2/namespaces/profile 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/6.2/namespaces/profile 2023-08-18 21:54:22.000000000 +0000 @@ -0,0 +1 @@ +yes diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/6.2/network/af_mask livecd-rootfs-2.765.24/live-build/apparmor/6.2/network/af_mask --- livecd-rootfs-2.765.23/live-build/apparmor/6.2/network/af_mask 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/6.2/network/af_mask 2023-08-18 21:54:22.000000000 +0000 @@ -0,0 +1 @@ +unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/6.2/network/af_unix livecd-rootfs-2.765.24/live-build/apparmor/6.2/network/af_unix --- livecd-rootfs-2.765.23/live-build/apparmor/6.2/network/af_unix 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/6.2/network/af_unix 2023-08-18 21:54:22.000000000 +0000 @@ -0,0 +1 @@ +yes diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/6.2/network_v8/af_mask livecd-rootfs-2.765.24/live-build/apparmor/6.2/network_v8/af_mask --- livecd-rootfs-2.765.23/live-build/apparmor/6.2/network_v8/af_mask 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/6.2/network_v8/af_mask 2023-08-18 21:54:22.000000000 +0000 @@ -0,0 +1 @@ +unspec unix inet ax25 ipx appletalk netrom bridge atmpvc x25 inet6 rose netbeui security key netlink packet ash econet atmsvc rds sna irda pppox wanpipe llc ib mpls can tipc bluetooth iucv rxrpc isdn phonet ieee802154 caif alg nfc vsock kcm qipcrtr smc xdp diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/6.2/policy/set_load livecd-rootfs-2.765.24/live-build/apparmor/6.2/policy/set_load --- livecd-rootfs-2.765.23/live-build/apparmor/6.2/policy/set_load 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/6.2/policy/set_load 2023-08-18 21:54:22.000000000 +0000 @@ -0,0 +1 @@ +yes diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/6.2/policy/versions/v5 livecd-rootfs-2.765.24/live-build/apparmor/6.2/policy/versions/v5 --- livecd-rootfs-2.765.23/live-build/apparmor/6.2/policy/versions/v5 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/6.2/policy/versions/v5 2023-08-18 21:54:22.000000000 +0000 @@ -0,0 +1 @@ +yes diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/6.2/policy/versions/v6 livecd-rootfs-2.765.24/live-build/apparmor/6.2/policy/versions/v6 --- livecd-rootfs-2.765.23/live-build/apparmor/6.2/policy/versions/v6 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/6.2/policy/versions/v6 2023-08-18 21:54:22.000000000 +0000 @@ -0,0 +1 @@ +yes diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/6.2/policy/versions/v7 livecd-rootfs-2.765.24/live-build/apparmor/6.2/policy/versions/v7 --- livecd-rootfs-2.765.23/live-build/apparmor/6.2/policy/versions/v7 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/6.2/policy/versions/v7 2023-08-18 21:54:22.000000000 +0000 @@ -0,0 +1 @@ +yes diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/6.2/policy/versions/v8 livecd-rootfs-2.765.24/live-build/apparmor/6.2/policy/versions/v8 --- livecd-rootfs-2.765.23/live-build/apparmor/6.2/policy/versions/v8 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/6.2/policy/versions/v8 2023-08-18 21:54:22.000000000 +0000 @@ -0,0 +1 @@ +yes diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/6.2/ptrace/mask livecd-rootfs-2.765.24/live-build/apparmor/6.2/ptrace/mask --- livecd-rootfs-2.765.23/live-build/apparmor/6.2/ptrace/mask 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/6.2/ptrace/mask 2023-08-18 21:54:22.000000000 +0000 @@ -0,0 +1 @@ +read trace diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/6.2/query/label/data livecd-rootfs-2.765.24/live-build/apparmor/6.2/query/label/data --- livecd-rootfs-2.765.23/live-build/apparmor/6.2/query/label/data 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/6.2/query/label/data 2023-08-18 21:54:22.000000000 +0000 @@ -0,0 +1 @@ +yes diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/6.2/query/label/multi_transaction livecd-rootfs-2.765.24/live-build/apparmor/6.2/query/label/multi_transaction --- livecd-rootfs-2.765.23/live-build/apparmor/6.2/query/label/multi_transaction 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/6.2/query/label/multi_transaction 2023-08-18 21:54:22.000000000 +0000 @@ -0,0 +1 @@ +yes diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/6.2/query/label/perms livecd-rootfs-2.765.24/live-build/apparmor/6.2/query/label/perms --- livecd-rootfs-2.765.23/live-build/apparmor/6.2/query/label/perms 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/6.2/query/label/perms 2023-08-18 21:54:22.000000000 +0000 @@ -0,0 +1 @@ +allow deny audit quiet diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/6.2/rlimit/mask livecd-rootfs-2.765.24/live-build/apparmor/6.2/rlimit/mask --- livecd-rootfs-2.765.23/live-build/apparmor/6.2/rlimit/mask 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/6.2/rlimit/mask 2023-08-18 21:54:22.000000000 +0000 @@ -0,0 +1 @@ +cpu fsize data stack core rss nproc nofile memlock as locks sigpending msgqueue nice rtprio rttime diff -Nru livecd-rootfs-2.765.23/live-build/apparmor/6.2/signal/mask livecd-rootfs-2.765.24/live-build/apparmor/6.2/signal/mask --- livecd-rootfs-2.765.23/live-build/apparmor/6.2/signal/mask 1970-01-01 00:00:00.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/apparmor/6.2/signal/mask 2023-08-18 21:54:22.000000000 +0000 @@ -0,0 +1 @@ +hup int quit ill trap abrt bus fpe kill usr1 segv usr2 pipe alrm term stkflt chld cont stop stp ttin ttou urg xcpu xfsz vtalrm prof winch io pwr sys emt lost diff -Nru livecd-rootfs-2.765.23/live-build/functions livecd-rootfs-2.765.24/live-build/functions --- livecd-rootfs-2.765.23/live-build/functions 2023-05-23 14:40:15.000000000 +0000 +++ livecd-rootfs-2.765.24/live-build/functions 2023-08-18 21:54:28.000000000 +0000 @@ -767,7 +767,10 @@ # a snap pre-seeding issue can occur, where the incorrect apparmor features are reported # basic copy of a directory structure overriding the "generic" feature set # which is tied to the LTS kernel - cp -R --verbose /usr/share/livecd-rootfs/live-build/apparmor/${kern_major_min}/* /usr/share/livecd-rootfs/live-build/apparmor/generic/ + + # Bind kernel apparmor directory to feature directory for snap preseeding + umount "${CHROOT_ROOT}/sys/kernel/security/apparmor/features/" + mount --bind /usr/share/livecd-rootfs/live-build/apparmor/${kern_major_min} "${CHROOT_ROOT}/sys/kernel/security/apparmor/features/" fi fi @@ -777,6 +780,14 @@ /usr/lib/snapd/snap-preseed $(realpath "${CHROOT_ROOT}") chroot "${CHROOT_ROOT}" apparmor_parser --skip-read-cache --write-cache --skip-kernel-load --verbose -j `nproc` /etc/apparmor.d fi + + # Unmount kernel specific apparmor feature + # mount generic apparmor feature again (cleanup) + if [ -d /build/config/hooks.d/extra/apparmor/${kern_major_min} ]; then + umount "${CHROOT_ROOT}/sys/kernel/security/apparmor/features/" + mount -o bind /usr/share/livecd-rootfs/live-build/apparmor/generic "${CHROOT_ROOT}/sys/kernel/security/apparmor/features/" + fi + } snap_from_seed() {