APPLIED Re: [resolute][Patch 0/1] UBUNTU: SAUCE: apparmor: fix aa_label_sk_perm

Timo Aaltonen timo.aaltonen at canonical.com
Wed Feb 18 12:06:39 UTC 2026


On 13.2.2026 0.49, John Johansen wrote:
> BugLink: http://www.launchpad.net/bugs/2141298
> 
> [ Impact ]
> 
> Snap packages, and profiles using the 4.0 abi are currently blocked by
> AppArmor network mediation. This is due to a regression in the network
> compatibility patch. Without this patch snaps and applications
> confined by profiles using a 4.0 abi are will not be able to use the
> network when the system is using the 6.19 kernel.
> 
> [ Test Plan ]
> 
> Install QRT and run the AppArmor regression test suite (part of
> regular QA test run). To run manually
> 
>    git clone https://git.launchpad.net/qa-regression-testing
>    cd qa-regression-testing/scripts
>    sudo ./test-apparmor.py -v
> 
> Manually test snap known to be affected by the failure.
>    sudo snap install teams-for-linux
>    snap run teams-for-linux
> 
> [ Where problems could occur ]
> 
> The code affects network mediation of most socket address
> families. There is potential for further regressions in confined
> applications trying to use sockets that are not broken by the current
> regression.
> 
> These would likely be limited to much older abi 2.x profiles, due that
> currently pass under the current regression.
> 
> [ Other Info ]

applied to master-next, thanks




More information about the kernel-team mailing list