Bug #1990960 “kinetic/linux: 5.19.0-19.19 -proposed tracker” : Bugs : Kernel SRU Workflow

Andrea Righi (arighi) on 2022-09-27

tags:	added: kernel-release-tracking-bug-live
description:	updated
tags:	added: kernel-sru-cycle-d2022.09.27-1
Changed in kernel-sru-workflow:
status:	New → Confirmed
importance:	Undecided → Medium

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-09-27

Changed in linux (Ubuntu Kinetic):
importance:	Undecided → Medium
tags:	added: kernel-block-derivatives
tags:	added: kernel-regression-testing-early
Changed in kernel-sru-workflow:
status:	Confirmed → Triaged
description:	updated
Changed in kernel-sru-workflow:
status:	Triaged → In Progress

Andrea Righi (arighi) on 2022-09-27

summary:

- kinetic/linux: <version to be filled> -proposed tracker
+ kinetic/linux: 5.19.0-19.19 -proposed tracker

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-09-27

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-09-27

description:	updated
description:	updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-09-27

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-09-27

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-09-27

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-09-27

description:	updated
description:	updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-09-27

description:	updated
description:	updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-09-27

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-09-27

description:	updated
description:	updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-09-27

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-09-27

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-09-27

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-09-27

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-09-27

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-09-27

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-09-27

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-09-28

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-09-28

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-09-28

description:

updated

Andrea Righi (arighi) on 2022-09-28

tags:

removed: kernel-block-derivatives

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-09-28

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-09-28

description:

updated

Revision history for this message

Andy Whitcroft (apw) wrote on 2022-09-28: canonical-signing-jobs

#1

# title kernel 1990960
copy --from ppa:canonical-kernel-team/ubuntu/bootstrap --from-suite kinetic --sources linux-restricted-modules/5.19.0-19.19 linux/5.19.0-19.19 linux-meta/5.19.0.19.19 linux-signed/5.19.0-19.19/signing --from ppa:canonical-kernel-team/ubuntu/bootstrap-ps --from-suite kinetic --sources linux-restricted-generate/5.19.0-19.19 linux-restricted-signatures/5.19.0-19.19/signing --to ppa:canonical-signing/ubuntu/primary --to-suite kinetic
copy --from ppa:canonical-signing/ubuntu/primary --from-suite kinetic --sources linux-restricted-modules/5.19.0-19.19 linux/5.19.0-19.19 linux-meta/5.19.0.19.19 linux-signed/5.19.0-19.19 linux-restricted-signatures/5.19.0-19.19 --to ubuntu --to-suite kinetic-proposed
delete --from ppa:canonical-signing/ubuntu/primary --from-suite kinetic --sources linux-restricted-modules/5.19.0-19.19 linux/5.19.0-19.19 linux-meta/5.19.0.19.19 linux-signed/5.19.0-19.19 linux-restricted-generate/5.19.0-19.19 linux-restricted-signatures/5.19.0-19.19

tags:	added: kernel-signing-bot
Changed in canonical-signing-jobs:
status:	New → Triaged

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-09-28

description:

updated

Andy Whitcroft (apw) on 2022-09-29

Changed in canonical-signing-jobs:
assignee:	nobody → Andy Whitcroft (apw)
importance:	Undecided → Medium

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-09-29

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-09-29

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-09-29

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-10-04

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-10-04

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-10-04

Changed in canonical-signing-jobs:
status:	Triaged → Confirmed
description:	updated

Andy Whitcroft (apw) on 2022-10-04

Changed in canonical-signing-jobs:
status:	Confirmed → In Progress

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-10-04

description:	updated
description:	updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-10-04

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-10-04

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-10-04

description:	updated
description:	updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-10-04

description:

updated

Andy Whitcroft (apw) on 2022-10-04

Changed in canonical-signing-jobs:
status:	In Progress → Fix Released

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-10-04

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-10-04

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-10-04

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-10-05

description:

updated

Andrea Righi (arighi) on 2022-10-06

tags:

added: regression-testing-passed

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-10-06

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-10-06

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-10-06

description:

updated

Revision history for this message

Launchpad Janitor (janitor) wrote on 2022-10-08:

#2

Download full text (13.9 KiB)

This bug was fixed in the package linux - 5.19.0-19.19

---------------
linux (5.19.0-19.19) kinetic; urgency=medium

* kinetic/linux: 5.19.0-19.19 -proposed tracker (LP: #1990960)

  * kinetic: apply new apparmor and LSM stacking patch set (LP: #1989983)
    - Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Specify which LSM to display
      (using struct cred as input)"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: apparmor: Fix build error, make sk
      parameter const"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
      smk_netlbl_mls()"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: LSM: change ima_read_file() to use
      lsmblob"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: apparmor: rename kzfree() to
      kfree_sensitive()"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: Audit: Fix for missing NULL check"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: AppArmor: Remove the exclusive
      flag"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Add /proc attr entry for full
      LSM context"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: Audit: Add a new record for multiple
      object LSM attributes"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: Audit: Fix incorrect static inline
      function declration."""
    - Revert "Revert "Revert "UBUNTU: SAUCE: Audit: Add new record for multiple
      process LSM attributes"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: NET: Store LSM netlabel data in a
      lsmblob"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: LSM: security_secid_to_secctx in
      netlink netfilter"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmcontext in
      security_inode_getsecctx"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmcontext in
      security_secid_to_secctx"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Ensure the correct LSM context
      releaser"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Specify which LSM to display"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: IMA: Change internal interfaces to
      use lsmblobs"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
      security_cred_getsecid"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
      security_inode_getsecid"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
      security_task_getsecid"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
      security_ipc_getsecid"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
      security_secid_to_secctx"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
      security_secctx_to_secid"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: net: Prepare UDS for security module
      stacking"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
      security_kernel_act_as"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
      security_audit_rule_match"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Create and manage the lsmblob
      data structure."""
    - Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Infrastructure management of the
      sock security"""
    - Revert "Revert "Revert "UBUNTU: SAU...

This bug was fixed in the package linux - 5.19.0-19.19

---------------
linux (5.19.0-19.19) kinetic; urgency=medium

* kinetic/linux: 5.19.0-19.19 -proposed tracker (LP: #1990960)

* kinetic: apply new apparmor and LSM stacking patch set (LP: #1989983)
    - Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Specify which LSM to display
      (using struct cred as input)"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: apparmor: Fix build error, make sk
      parameter const"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
      smk_netlbl_mls()"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: LSM: change ima_read_file() to use
      lsmblob"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: apparmor: rename kzfree() to
      kfree_sensitive()"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: Audit: Fix for missing NULL check"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: AppArmor: Remove the exclusive
      flag"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Add /proc attr entry for full
      LSM context"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: Audit: Add a new record for multiple
      object LSM attributes"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: Audit: Fix incorrect static inline
      function declration."""
    - Revert "Revert "Revert "UBUNTU: SAUCE: Audit: Add new record for multiple
      process LSM attributes"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: NET: Store LSM netlabel data in a
      lsmblob"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: LSM: security_secid_to_secctx in
      netlink netfilter"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmcontext in
      security_inode_getsecctx"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmcontext in
      security_secid_to_secctx"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Ensure the correct LSM context
      releaser"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Specify which LSM to display"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: IMA: Change internal interfaces to
      use lsmblobs"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
      security_cred_getsecid"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
      security_inode_getsecid"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
      security_task_getsecid"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
      security_ipc_getsecid"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
      security_secid_to_secctx"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
      security_secctx_to_secid"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: net: Prepare UDS for security module
      stacking"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
      security_kernel_act_as"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Use lsmblob in
      security_audit_rule_match"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Create and manage the lsmblob
      data structure."""
    - Revert "Revert "Revert "UBUNTU: SAUCE: LSM: Infrastructure management of the
      sock security"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: apparmor: LSM stacking: switch from
      SK_CTX() to aa_sock()"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: apparmor: rename aa_sock() to
      aa_unix_sk()"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: apparmor: disable showing the mode as
      part of a secid to secctx"""
    - Revert "Revert "Revert "apparmor: fix absroot causing audited secids to
      begin with ="""
    - Revert "Revert "Revert "UBUNTU SAUCE: apparmor: fix apparmor mediating
      locking non-fs, unix sockets"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: apparmor: fix use after free in
      sk_peer_label"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: apparmor: af_unix mediation"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: apparmor: patch to provide
      compatibility with v2.x net rules"""
    - Revert "Revert "Revert "UBUNTU: SAUCE: apparmor: add/use fns to print hash
      string hex value"""
    - SAUCE: upstream v6.0: apparmor: fix absroot causing audited secids to begin
      with =
    - SAUCE: upstream v6.0: apparmor: Fix kernel-doc
    - SAUCE: upstream v6.0: lsm: Fix kernel-doc
    - SAUCE: upstream v6.0: apparmor: Update help description of policy hash for
      introspection
    - SAUCE: upstream v6.0: apparmor: make export of raw binary profile to
      userspace optional
    - SAUCE: upstream v6.0: apparmor: Enable tuning of policy paranoid load for
      embedded systems
    - SAUCE: upstream v6.0: apparmor: don't create raw_sha1 symlink if sha1
      hashing is disabled
    - SAUCE: upstream v6.0: apparmor: resolve uninitialized symbol warnings in
      policy_unpack_test.c
    - SAUCE: upstream v6.0: security/apparmor: remove redundant ret variable
    - SAUCE: upstream v6.0: apparmor: Use struct_size() helper in kmalloc()
    - SAUCE: upstream v6.0: apparmor: Fix match_mnt_path_str() and match_mnt()
      kernel-doc comment
    - SAUCE: upstream v6.0: apparmor: Fix some kernel-doc comments
    - SAUCE: upstream v6.0: apparmor: Fix some kernel-doc comments
    - SAUCE: upstream v6.0: apparmor: Fix undefined reference to
      `zlib_deflate_workspacesize'
    - SAUCE: upstream v6.0: apparmor: Fix some kernel-doc comments
    - SAUCE: upstream v6.0: apparmor: test: Remove some casts which are no-longer
      required
    - SAUCE: upstream v6.0: apparmor: add a kernel label to use on kernel objects
    - SAUCE: upstream v6.0: apparmor: Convert secid mapping to XArrays instead of
      IDR
    - SAUCE: upstream v6.0: apparmor: disable showing the mode as part of a secid
      to secctx
    - SAUCE: upstream v6.0: apparmor: Mark alloc_unconfined() as static
    - SAUCE: upstream v6.0: apparmor: Fix some kernel-doc comments
    - SAUCE: upstream v6.0: apparmor: allow label to carry debug flags
    - SAUCE: upstream v6.0: apparmor: extend policydb permission set by making use
      of the xbits
    - SAUCE: upstream v6.0: apparmor: move ptrace mediation to more logical
      task.{h,c}
    - SAUCE: upstream v6.0: apparmor: correct config reference to intended one
    - SAUCE: upstream v6.0: lsm,io_uring: add LSM hooks for the new uring_cmd file
      op
    - SAUCE: upstream v6.0: selinux: implement the security_uring_cmd() LSM hook
    - SAUCE: upstream v6.0: Smack: Provide read control for io_uring_cmd
    - SAUCE: apparmor-next 6.1: apparmor: fix a memleak in multi_transaction_new()
    - SAUCE: apparmor-next 6.1: apparmor: fix lockdep warning when removing a
      namespace
    - SAUCE: apparmor-next 6.1: apparmor: reserve mediation classes
    - SAUCE: apparmor-next 6.1: apparmor: use zstd compression for profile data
    - SAUCE: apparmor-next 6.1: apparmor: expose compression level limits in sysfs
    - SAUCE: apparmor-next 6.1: apparmor: compute file permissions on profile load
    - SAUCE: apparmor-next 6.1: apparmor: compute xmatch permissions on profile
      load
    - SAUCE: apparmor-next 6.1: apparmor: move fperm computation into
      policy_unpack
    - SAUCE: apparmor-next 6.1: apparmor: rework and cleanup fperm computation
    - SAUCE: apparmor-next 6.1: apparmor: convert xmatch to use aa_perms structure
    - SAUCE: apparmor-next 6.1: apparmor: compute policydb permission on profile
      load
    - SAUCE: apparmor-next 6.1: apparmor: combine file_rules and aa_policydb into
      a single shared struct
    - SAUCE: apparmor-next 6.1: apparmor: convert xmatch to using the new shared
      policydb struct
    - SAUCE: apparmor-next 6.1: apparmor: convert fperm lookup to use accept as an
      index
    - SAUCE: apparmor-next 6.1: apparmor: convert xmatch lookup to use accept as
      an index
    - SAUCE: apparmor-next 6.1: apparmor: cleanup shared permission struct
    - SAUCE: apparmor-next 6.1: apparmor: convert policy lookup to use accept as
      an index
    - SAUCE: apparmor-next 6.1: apparmor: preparse for state being more than just
      an integer
    - SAUCE: apparmor-next 6.1: apparmor: Fix abi check to include v8 abi
    - SAUCE: apparmor-next 6.1: apparmor: fix apparmor mediating locking non-fs
      unix sockets
    - SAUCE: apparmor-next 6.1: apparmor: extend policydb permission set by making
      use of the xbits
    - SAUCE: apparmor-next 6.1: apparmor: move dfa perm macros into policy_unpack
    - SAUCE: apparmor-next 6.1: apparmor: extend xindex size
    - SAUCE: apparmor-next 6.1: apparmor: isolate policy backwards compatibility
      to its own file
    - SAUCE: apparmor-next 6.1: apparmor: extend permissions to support a label
      and tag string
    - SAUCE: apparmor-next 6.1: apparmor: add mediation class information to
      auditing
    - SAUCE: apparmor-next 6.1: apparmor: add user mode flag
    - SAUCE: apparmor-next 6.1: apparmor: make transition table unpack generic so
      it can be reused
    - SAUCE: apparmor-next 6.1: apparmor: group dfa policydb unpacking
    - SAUCE: apparmor-next 6.1: apparmor: make unpack_array return a trianary
      value
    - SAUCE: apparmor-next 6.1: apparmor: add the ability for policy to specify a
      permission table
    - SAUCE: apparmor-next 6.1: apparmor: verify permission table indexes
    - SAUCE: apparmor-next 6.1: apparmor: make sure perm indexes are accumulated
    - SAUCE: apparmor-next 6.1: apparmor: cleanup: move perm accumulation into
      perms.h
    - SAUCE: apparmor-next 6.1: apparmor: verify loaded permission bits masks
      don't overlap
    - SAUCE: apparmor-next 6.1: apparmor: refactor profile rules and attachments
    - SAUCE: apparmor-next 6.1: apparmor: rework profile->rules to be a list
    - SAUCE: apparmor-next 6.1: apparmor: fix aa_class_names[] to match reserved
      classes
    - SAUCE: apparmor-next 6.1: apparmor: Fix regression in stacking due to label
      flags
    - SAUCE: apparmor-next 6.1: apparmor: Simplify obtain the newest label on a
      cred
    - SAUCE: apparmor-next 6.1: apparmor: make __aa_path_perm() static
    - SAUCE: apparmor-next 6.1: apparmor: Fix doc comment for compute_fperms
    - SAUCE: apparmor-next 6.1: apparmor: Remove unnecessary size check when
      unpacking trans_table
    - SAUCE: apparmor-next 6.1: apparmor: make sure the decompression ctx is
      promperly initialized
    - SAUCE: apparmor: add/use fns to print hash string hex value
    - SAUCE: apparmor: patch to provide compatibility with v2.x net rules
    - SAUCE: Revert "UBUNTU: SAUCE: apparmor-next 6.1: apparmor: make
      __aa_path_perm() static"
    - SAUCE: apparmor: af_unix mediation
    - SAUCE: fix shutdown unix socket owner conditional check
    - SAUCE: apparmor: rename aa_sock() to aa_unix_sk()
    - SAUCE: apparmor: Add fine grained mediation of posix mqueues
    - SAUCE: apparmor: LSM stacking: switch from SK_CTX() to aa_sock()
    - SAUCE: lsm stacking v37: integrity: disassociate ima_filter_rule from
      security_audit_rule
    - SAUCE: lsm stacking v37: LSM: Infrastructure management of the sock security
    - SAUCE: lsm stacking v37: LSM: Add the lsmblob data structure.
    - SAUCE: lsm stacking v37: LSM: provide lsm name and id slot mappings
    - SAUCE: lsm stacking v37: IMA: avoid label collisions with stacked LSMs
    - SAUCE: lsm stacking v37: LSM: Use lsmblob in security_audit_rule_match
    - SAUCE: lsm stacking v37: LSM: Use lsmblob in security_kernel_act_as
    - SAUCE: lsm stacking v37: LSM: Use lsmblob in security_secctx_to_secid
    - SAUCE: lsm stacking v37: LSM: Use lsmblob in security_secid_to_secctx
    - SAUCE: lsm stacking v37: LSM: Use lsmblob in security_ipc_getsecid
    - SAUCE: lsm stacking v37: LSM: Use lsmblob in security_current_getsecid
    - SAUCE: lsm stacking v37: LSM: Use lsmblob in security_inode_getsecid
    - SAUCE: lsm stacking v37: LSM: Use lsmblob in security_cred_getsecid
    - SAUCE: lsm stacking v37: LSM: Specify which LSM to display
    - SAUCE: fixup lsm stacking v37: LSM: Specify which LSM to display
    - SAUCE: lsm stacking v37: LSM: Ensure the correct LSM context releaser
    - SAUCE: lsm stacking v37: LSM: Use lsmcontext in security_secid_to_secctx
    - SAUCE: lsm stacking v37: LSM: Use lsmcontext in security_inode_getsecctx
    - SAUCE: lsm stacking v37: LSM: Use lsmcontext in
      security_dentry_init_security
    - SAUCE: lsm stacking v37: LSM: security_secid_to_secctx in netlink netfilter
    - SAUCE: lsm stacking v37: NET: Store LSM netlabel data in a lsmblob
    - SAUCE: lsm stacking v37: binder: Pass LSM identifier for confirmation
    - SAUCE: lsm stacking v37: LSM: security_secid_to_secctx module selection
    - SAUCE: lsm stacking v37: Audit: Keep multiple LSM data in audit_names
    - SAUCE: lsm stacking v37: Audit: Create audit_stamp structure
    - SAUCE: lsm stacking v37: LSM: Add a function to report multiple LSMs
    - SAUCE: lsm stacking v37: Audit: Allow multiple records in an audit_buffer
    - SAUCE: lsm stacking v37: Audit: Add record for multiple task security
      contexts
    - SAUCE: lsm stacking v37: audit: multiple subject lsm values for netlabel
    - SAUCE: lsm stacking v37: Audit: Add record for multiple object contexts
    - SAUCE: lsm stacking v37: netlabel: Use a struct lsmblob in audit data
    - SAUCE: lsm stacking v37: LSM: Removed scaffolding function lsmcontext_init
    - SAUCE: lsm stacking v37: LSM: Add /proc attr entry for full LSM context
    - SAUCE: lsm stacking v37: AppArmor: Remove the exclusive flag
    - SAUCE: security, lsm: Introduce security_create_user_ns()
    - SAUCE: bpf-lsm: Make bpf_lsm_userns_create() sleepable
    - SAUCE: selinux: Implement userns_create hook
    - SAUCE: apparmor: add user namespace creation mediation
    - [Config] update configs after apply new apparmor patch set

* kinetic: apply new apparmor and LSM stacking patch set (LP: #1989983) //
    5.19.0-17.17: kernel NULL pointer dereference, address: 0000000000000084
    (LP: #1990236)
    - SAUCE: apparmor: fix oops in unix owner conditional setup

* Miscellaneous Ubuntu changes
    - [Config] make sure CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT is enforced

-- Andrea Righi <andrea.righi@canonical.com>  Tue, 27 Sep 2022 16:51:09 +0200

Changed in linux (Ubuntu Kinetic):
status:	New → Fix Released

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-10-08

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-10-08

description:

updated

Revision history for this message

Ubuntu Kernel Bot (ubuntu-kernel-bot) wrote on 2022-10-08: Workflow done!

#3

All tasks have been completed and the bug is being closed

Changed in kernel-sru-workflow:
status:	In Progress → Fix Committed

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-10-10

description:

updated

Revision history for this message

Ubuntu Kernel Bot (ubuntu-kernel-bot) wrote on 2022-11-21:

#4

This bug is awaiting verification that the linux-hwe-5.19/5.19.0-24.25~22.04.1 kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-jammy' to 'verification-done-jammy'. If the problem still exists, change the tag 'verification-needed-jammy' to 'verification-failed-jammy'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

tags:	added: verification-needed-jammy
Changed in kernel-sru-workflow:
status:	Fix Committed → Fix Released

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2022-12-07

tags:	removed: verification-needed-jammy
description:	updated

Kernel SRU Workflow

kinetic/linux: 5.19.0-19.19 -proposed tracker

Bug Description

Other bug subscribers

Remote bug watches

	Status	Importance	Assigned to
Kernel SRU Workflow	Fix Released	Medium	Unassigned
Automated-testing	Fix Released	Medium	Canonical Kernel Team
Boot-testing	Fix Released	Medium	Unassigned
New-review	Fix Released	Medium	Andy Whitcroft
Prepare-package	Fix Released	Medium	Andrea Righi
Prepare-package-lrg	Fix Released	Medium	Andrea Righi
Prepare-package-lrm	Fix Released	Medium	Andrea Righi
Prepare-package-lrs	Fix Released	Medium	Andrea Righi
Prepare-package-meta	Fix Released	Medium	Andrea Righi
Prepare-package-signed	Fix Released	Medium	Andrea Righi
Promote-signing-to-proposed	Invalid	Medium	Unassigned
Promote-to-proposed	Fix Released	Medium	Canonical Kernel Team
Promote-to-release	Fix Released	Medium	Ubuntu Package Archive Administrators
Regression-testing	Fix Released	Medium	Canonical Kernel Team
Sru-review	Fix Released	Medium	Andy Whitcroft
canonical-signing-jobs	Fix Released	Medium	Andy Whitcroft
linux (Ubuntu)
Kinetic	Fix Released	Medium	Unassigned