APPLIED Re: [resolute][Patch 0/1] UBUNTU: SAUCE: apparmor: fix aa_label_sk_perm
Timo Aaltonen
timo.aaltonen at canonical.com
Wed Feb 18 12:06:39 UTC 2026
On 13.2.2026 0.49, John Johansen wrote:
> BugLink: http://www.launchpad.net/bugs/2141298
>
> [ Impact ]
>
> Snap packages, and profiles using the 4.0 abi are currently blocked by
> AppArmor network mediation. This is due to a regression in the network
> compatibility patch. Without this patch snaps and applications
> confined by profiles using a 4.0 abi are will not be able to use the
> network when the system is using the 6.19 kernel.
>
> [ Test Plan ]
>
> Install QRT and run the AppArmor regression test suite (part of
> regular QA test run). To run manually
>
> git clone https://git.launchpad.net/qa-regression-testing
> cd qa-regression-testing/scripts
> sudo ./test-apparmor.py -v
>
> Manually test snap known to be affected by the failure.
> sudo snap install teams-for-linux
> snap run teams-for-linux
>
> [ Where problems could occur ]
>
> The code affects network mediation of most socket address
> families. There is potential for further regressions in confined
> applications trying to use sockets that are not broken by the current
> regression.
>
> These would likely be limited to much older abi 2.x profiles, due that
> currently pass under the current regression.
>
> [ Other Info ]
applied to master-next, thanks
More information about the kernel-team
mailing list