=== cpaelzer__ is now known as cpaelzer
=== cpaelzer__ is now known as cpaelzer
=== cpaelzer__ is now known as cpaelzer
sdezielhello, in LP: #1844186,  jjohansen  was kind enough to provide test kernel builds addressing the issue for various releases/kernels. Most patches ended up in official kernels but not those for 4.4.0 and 4.15.021:06
ubot5Launchpad bug 1844186 in linux (Ubuntu Bionic) "[regression] NoNewPrivileges incompatible with Apparmor" [Undecided,Confirmed] https://launchpad.net/bugs/184418621:06
sdezielyet, those were tested to be working and fixing the problem so I'd appreciate if someone could integrate them, please21:07
sarnoldsdeziel: any chance you recall if those fixes broke snapd or similar? my memory is too fuzzy21:22
sdezielsarnold: definitely not in a user visible way for the 5.0+ kernels as I test them with lxd's snap21:23
sdezielsarnold: but for the older kernels, I didn't specifically tested snapd21:23
sdezielsarnold: I could test 4.15.0 with lxd's snap if that can make that bug progress, should I do that?21:26
sarnoldsdeziel: I can't promise anything, I just have a vague memory that an apparmor security fix broke something in snapd so we had to revert it.. it's possible that a comment "this patch didn't break these snapd use cases for me..." would help, but I'm not on the decision path thtere..21:27
sdezielsarnold: OK, I'll try to do that test and report back. Ultimately I would have like if jjohansen could comment on why only 3 of his 5 patches were integrated ;)21:32
sdezielhe's worked on those patches so it be too bad to not see them integrated ;)21:33
sarnolda sadly all too common fate :(21:34

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!