APPLIED: [SRU][N][Patch 0/1] UBUNTU: SAUCE: fix: apparmor4.0.0 [26/90]: LSM

[Edoardo Canepa]

Applied to noble:linux/master-next. Thanks.

On 10/6/25 16:11, John Johansen wrote:
> SRU Justification:
>
> [Impact]
>
> * When auditd is installed and audit rules are used the console can be
>    flooded with the error message.
>
>    error in audit_log_object_context
>
> [Fix]
>
> * The fix is backported from
>
>    5ba569134855 https://github.com/cschaufler/lsm-stacking.
>
> This is the development upstream for the out of tree LSM stacking
> patch series.
>
>
> * The fix is also carried the Oracular 6.14 kernel in its version of the patch
>
>    commit 28b69ac0e2fc ("UBUNTU: SAUCE: apparmor4.0.0 [25/99]: Audit: Add record for multiple object contexts")
>
>
> Specifically the fix changes the test for failure on the result from
> security_secid_to_secctx(), which on success returns a size and on
> failure returns an error.
>
> [Test Plan]
>
> * Install audit
> * ensure AppArmor is enabled by running aa-enabled
> * Add the audit rule
>     auditctl -a always,exit -S execve -k all_execs
> * run applications, or shell commands
>
> If the fix is not applied each application or command run with result
> in a message to the console. If the console is not displaying the
> error message
>
>     error in audit_log_object_context
>
> the fix is working.
>
> [Where problems could occur]
>
> * The regression can be considered as low, since: the fix is already
>    integrated into in the plucky 6.14, and questing 6.16/6.17 kernels
>    without reported issues.
>
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0x20F88172E14F6784.asc
Type: application/pgp-keys
Size: 3167 bytes
Desc: OpenPGP public key
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20251010/89386954/attachment-0001.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20251010/89386954/attachment-0001.sig>