[resolute][Patch 0/1] UBUNTU: SAUCE: apparmor: fix aa_label_sk_perm

[John Johansen]

BugLink: http://www.launchpad.net/bugs/2141298

[ Impact ]

Snap packages, and profiles using the 4.0 abi are currently blocked by
AppArmor network mediation. This is due to a regression in the network
compatibility patch. Without this patch snaps and applications
confined by profiles using a 4.0 abi are will not be able to use the
network when the system is using the 6.19 kernel.

[ Test Plan ]

Install QRT and run the AppArmor regression test suite (part of
regular QA test run). To run manually

  git clone https://git.launchpad.net/qa-regression-testing
  cd qa-regression-testing/scripts
  sudo ./test-apparmor.py -v

Manually test snap known to be affected by the failure.
  sudo snap install teams-for-linux
  snap run teams-for-linux

[ Where problems could occur ]

The code affects network mediation of most socket address
families. There is potential for further regressions in confined
applications trying to use sockets that are not broken by the current
regression.

These would likely be limited to much older abi 2.x profiles, due that
currently pass under the current regression.

[ Other Info ]