~ahasenack/ubuntu/+source/ubuntu-advantage-tools:xenial-ignore-apparmor-errors-when-starting-apt-news-2057937

Last commit made on 2024-03-25
Get this branch:
git clone -b xenial-ignore-apparmor-errors-when-starting-apt-news-2057937 https://git.launchpad.net/~ahasenack/ubuntu/+source/ubuntu-advantage-tools
Only Andreas Hasenack can upload to this branch. If you are Andreas Hasenack please log in for upload directions.

Branch merges

Branch information

Name:
xenial-ignore-apparmor-errors-when-starting-apt-news-2057937
Repository:
lp:~ahasenack/ubuntu/+source/ubuntu-advantage-tools

Recent commits

f79da6f... by Andreas Hasenack

changelog

df3ae83... by Andreas Hasenack

version.py: bump to 31.2.2

de79679... by Andreas Hasenack

changelog

e253e11... by Andreas Hasenack

apt-news.service: ignore apparmor errors when starting

It's possible to have a system where apparmor is enabled, but no profile
is loaded. This happens when the user removed the apparmor debian
package. In that situation, the ubuntu_pro_apt_news profile will not be
loaded into the kernel at startup, and systemd will fail to apply it to
the service when starting.

Systemd already ignores the apparmor setting when apparmor is disabled,
but in this situation it is still enabled. The fix is to configure the
service to also ignore errors when apparmor is enabled.

The drawback is that the service might run unconfined now if there are
problems applying the selected apparmor profile on startup.

Fixes: #3002
LP: #2057937

b7f7679... by Grant Orndorff

31.2~16.04 (patches unapplied)

Imported using git-ubuntu import.

03fa418... by Grant Orndorff

31.2 (patches unapplied)

Imported using git-ubuntu import.

a2be102... by Grant Orndorff

31.1 (patches unapplied)

Imported using git-ubuntu import.

3223e9d... by Grant Orndorff

31 (patches unapplied)

Imported using git-ubuntu import.

8bc436a... by Grant Orndorff

30.1 (patches unapplied)

Imported using git-ubuntu import.

422c66b... by Renan Rodrigo

changelog: change development release to noble

Signed-off-by: Renan Rodrigo <email address hidden>