[11:06] <alkisg> Hi, if I system boots fine with noapic, and crashes randomly without it, can I use some more refined kernel parameter to pinpoint it, or should I leave it at that?
[11:40] <lorddoskias> hello i have a tp-link wn822N rtl8192eu based usb wifi dongle and ubuntu 16.04.03. But the rtl8xxxu module is not detecting the wifi dongle. Here is the lsudb output: Bus 001 Device 005: ID 2357:0108
[11:47] <lorddoskias> it seems the rtl8xxxu driver in ubuntu is missing: c14239f23adb ("rtl8xxxu: Add another 8192eu device to the USB list")
[13:05] <smb> lorddoskias, you could increase the chances of this getting added to the 4.10 hwe kernel (if you are actually using that and not the original 4.4) before 4.13 becomes the next hwe kernel by filing a bug report for it (just run "ubuntu-bug linux" on the machine with the dongle plugged in). Then mention the bug number here
[15:13] <longsleep> Hey all, i want to run Kernel 4.14 on Xenial. Anyone here already figured out a way to avoid problems with AppArmor profile compatibility?
[16:40] <jjohansen> longsleep: it should be fine. Xenial actually has more features apparmor wise than 4.14
[16:45] <longsleep> jjohansen: mhm - last version i tried was linux-image-4.14.0-041400rc3-generic and there i get lot of denies of eg. dhclient
[16:51] <jjohansen> longsleep: so there was a patch reverted for 4.14-rc7, that was likely to be the source of your problem. Its not there anymore
[16:52] <jjohansen> so you should be fine
[16:52] <longsleep> jjohansen: ah that is excellent news thanks! Will try later tonight
[18:19] <longsleep> jjohansen: interesting, updated my Xenial installation to linux-image-4.14.0-041400-generic_4.14.0-041400.201711122031 and now [    0.042709] AppArmor: AppArmor disabled by boot time parameter - is that the expected behavior?
[18:19] <longsleep> trying to add `apparmor=1 security=apparmor` now ..
[18:25] <jjohansen> longsleep: it depends on how you configured your kernel when you built it. you need
[18:25] <jjohansen> CONFIG_SECURITY_APPARMOR=y
[18:25] <jjohansen> CONFIG_SECURITY_APPARMOR_BOOTPARAM_VALUE=1
[18:25] <jjohansen> CONFIG_DEFAULT_SECURITY_APPARMOR=y
[18:25] <jjohansen> CONFIG_DEFAULT_SECURITY="apparmor"
[18:28] <longsleep> jjohansen: yeah sure, i use the one from the ubuntu mainline kernel ppa - since ever those kernels had apparmor enabled by default. Now with http://kernel.ubuntu.com/~kernel-ppa/mainline/v4.14/ i need to add `apparmor=1 security=apparmor` - then it actually even works
[18:28] <longsleep> those now seem to have +# CONFIG_DEFAULT_SECURITY_APPARMOR is not set
[18:29] <longsleep> mhm ok, thats troubling imho - many people running from that ppa will have no apparmor when going for 4.14 without even noticing
[18:32] <longsleep> whoa that 4.14 package even has CONFIG_DEFAULT_SECURITY="selinux" - is Ubuntu switching to selinux?
[19:11] <jjohansen> longsleep: no, I have no idea why that would be set there
[19:12] <sforshee> jjohansen: our ubuntu configs have changed because of the lsm stacking patches, I think CONFIG_SECURITY_APPARMOR was removed. So when we try to apply those configs to mainline builds probably some options are getting set to whatever the defaults are.
[19:13] <sforshee> or CONFIG_DEFAULT_SECURITY_APPARMOR i mean
[19:14] <sforshee> apw: ^, not sure what we should do about that
[19:32] <jjohansen> sforshee: ah right, I'll get back to you on that
[20:13] <apw> sforshee: the config will need adapting ...
[20:14] <apw> there is a way to do that, card me ?
[20:14] <sforshee> apw: ack