UN-APPLIED[L]: NACK/Cmnt: [Lunar][PULL] apparmor fixes

Andrea Righi andrea.righi at canonical.com
Thu Apr 27 12:54:14 UTC 2023


On Thu, Apr 27, 2023 at 02:37:21PM +0200, Stefan Bader wrote:
> On 27.04.23 14:21, John Johansen wrote:
> > The following changes since commit
> > e182447c03d5025ced03573df8f937d4e5184a8c:
> > 
> >    UBUNTU: [Packaging] debian/rules: Add DKMS info to 'printenv' output
> > (2023-04-24 16:07:07 +0200)
> > 
> > are available in the Git repository at:
> > 
> >    git at gitlab.com:jjohansen/apparmor-kernel.git lunar-fixes
> > 
> > for you to fetch changes up to 871f2d6ed009718bfeb3b649d9d11663a5df23fb:
> > 
> >    UBUNTU: SAUCE: apparmor: fix: kzalloc perms tables for shared dfas
> > (2023-04-27 05:17:26 -0700)
> > 
> > ----------------------------------------------------------------
> > John Johansen (4):
> >        UBUNTU: SAUCE: apparmor: fix policy_compat perms remap for file dfa
> >        UBUNTU: SAUCE: apparmor: fix profile verification and enable it
> >        UBUNTU: SAUCE: apparmor: fix: add missing failure check in
> > compute_xmatch_perms
> >        UBUNTU: SAUCE: apparmor: fix: kzalloc perms tables for shared dfas
> > 
> >   security/apparmor/apparmorfs.c    |  2 +-
> >   security/apparmor/policy.c        | 13 +++++++
> >   security/apparmor/policy_compat.c | 20 +++++++----
> >   security/apparmor/policy_unpack.c | 72
> > ++++++++++++++++++++++++---------------
> >   4 files changed, 72 insertions(+), 35 deletions(-)
> > 
> > 
> 
> Rejected for the following reasons:
> - Lunar has released and now is under SRU rules
> - I cannot figure out this request has an associated LP bug because
> - the gitlab URI given does not work
> - SAUCE patches should have some more justification as to why we
>   have to differ from upstream
> 
> -Stefan

These are definitely valid reasons, I was still considering lunar/linux
as devel material, but at this point it's more stable material, so
patches should follow the SRU rules. My bad, sorry.

I've un-applied them from lunar. I'll take care of creating a proper
LP bug for these extra fixes.

For the apparmor SAUCE patches in general, it'd be nice to have a
description (even a short summary) of the differences from upstream and
why/what is using these features (this is probably for John, because I
don't have a view of the big picture regarding our SAUCE differences).

Thanks,
-Andrea



More information about the kernel-team mailing list