Ubuntu
apparmor package

abstractions need multiarch support

Bug #736870 reported by Jamie Strandboge
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
apparmor (Ubuntu)
Fix Released
High
Jamie Strandboge
Ubuntu ubuntu-11.04-beta-1
Natty
Fix Released
High
Jamie Strandboge
Ubuntu ubuntu-11.04-beta-1

Bug Description

Binary package hint: apparmor

With the upload of 2.13-0ubuntu6, libc6 has changed some of its paths based on DEB_HOST_MULTIARCH. Eg, on amd64:
$ cat /etc/ld.so.conf.d/x86_64-linux-gnu.conf
# Multiarch support
/lib/x86_64-linux-gnu
/usr/lib/x86_64-linux-gnu

and on i386:
$ cat /etc/ld.so.conf.d/i686-linux-gnu.conf
# Multiarch support
/lib/i386-linux-gnu
/usr/lib/i386-linux-gnu
/lib/i686-linux-gnu
/usr/lib/i686-linux-gnu

Paths should be added to the abstractions to use:
/lib/*-linux-gnu/...
/usr/lib/*-linux-gnu/...

We could probably do something like this instead:
/lib/{i386,i686,x86_64}-linux-gnu/...
/usr/lib/{i386,i686,x86_64}-linux-gnu/...

but since there will be different archs on different distributions as well as new archs, I'd prefer to leave the glob.

Tags: multiarch
Jamie Strandboge (jdstrand)
Changed in apparmor (Ubuntu):
assignee: nobody → Jamie Strandboge (jdstrand)
importance: Undecided → High
milestone: none → ubuntu-11.04-beta-1
status: New → In Progress
Jamie Strandboge (jdstrand)
Changed in apparmor (Ubuntu Natty):
status: In Progress → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package apparmor - 2.6.0-0ubuntu3

---------------
apparmor (2.6.0-0ubuntu3) natty; urgency=low

  * debian/patches/0004-lp736870.patch: add multiarch support to abstractions
    (LP: #736870)
 -- Jamie Strandboge <email address hidden> Thu, 17 Mar 2011 09:17:01 -0500

Changed in apparmor (Ubuntu Natty):
status: Fix Committed → Fix Released
Revision history for this message
Martin Pitt (pitti) wrote :

Reopening, as there are at least a few missing. E. g. cupsd currently fails on PAM, the "authentication" abstraction needs an update.

We should also preemptively update the paths in gnome, kde, and kerberosclient.

Changed in apparmor (Ubuntu Natty):
status: Fix Released → Triaged
Revision history for this message
Martin Pitt (pitti) wrote :

I'm happy to help with this, but I'm currently blocked on invalid patches:

$ LANG= quilt push -a
Applying patch 0001-add-chromium-browser.patch
patching file profiles/apparmor.d/usr.bin.chromium-browser

Applying patch 0002-lp727478.patch
patching file parser/parser.h
patching file parser/parser_main.c
patching file parser/parser_misc.c
patching file parser/parser.h
Hunk #1 FAILED at 179.
1 out of 1 hunk FAILED -- rejects in file parser/parser.h
patching file parser/parser_main.c
Hunk #1 FAILED at 90.
1 out of 1 hunk FAILED -- rejects in file parser/parser_main.c
patching file parser/parser_misc.c
Hunk #1 FAILED at 29.
Hunk #2 succeeded at 270 with fuzz 2 (offset 67 lines).
Hunk #3 FAILED at 276.
2 out of 3 hunks FAILED -- rejects in file parser/parser_misc.c
Patch 0002-lp727478.patch does not apply (enforce with -f)

This is a clean checkout from current Vcs-Bzr:.

Revision history for this message
Martin Pitt (pitti) wrote :

slangasek | jdstrand: oh, and on armel the path is /lib/arm-linux-gnueabi/, so doesn't match your glob at all

Revision history for this message
Jamie Strandboge (jdstrand) wrote :

Sorry about blocker. This is fixed now.

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package apparmor - 2.6.0-0ubuntu4

---------------
apparmor (2.6.0-0ubuntu4) natty; urgency=low

  * Update debian/patches/0004-lp736870.patch (LP: #736870):
    - armel triplet doesn't match '*-linux-gnu'
    - /lib/tls for libc6-xen needs handling
    - gnome, kde, kerberosclient, and authentication abstractions also need
      updating for multiarch.
 -- Steve Langasek <email address hidden> Tue, 22 Mar 2011 15:18:54 -0700

Changed in apparmor (Ubuntu Natty):
status: Triaged → Fix Released
Philipp Kaluza (pixelpapst)
tags: added: multiarch
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.