Watch Out Upgrading To Linux 4.14 If You Use AppArmor

[phoronix]

Phoronix: Watch Out Upgrading To Linux 4.14 If You Use AppArmor

Just a quick public service announcement if you rely upon AppArmor for security on your Linux distribution like Ubuntu/Debian and plan to soon upgrade to the Linux 4.14 kernel.....

http://www.phoronix.com/scan.php?page=news_item&px=AppArmor-Linux-4.14

[monte84]

I too have this issue with 4.14 RC5, I did not have this issue with 4.14 RC4 on debian however. Running Ubuntu 17.10 now.

[theghost]

Strange that these issues where not detected before? I can't imagine that no CI-system tests such simple testcases.

[starshipeleven]

One reason more why to use a custom kernel. When your networking environment is safe (firewall and 4G mobile network) , you do not need SELinux etc.

This post makes no sense at all, there is no logic, no causality in the statements herein.

[extide]

One reason more why to use a custom kernel. When your networking environment is safe (firewall and 4G mobile network) , you do not need SELinux etc.

No network is "safe"

[boxie]

One reason more why to use a custom kernel. When your networking environment is safe (firewall and 4G mobile network) , you do not need SELinux etc.

it's probably safe to assume that no networking environment is safe.

if you always assume that you have been compromised and design your network around it, then you will probably have a less bad day when it happens

[nils_]

Strange that these issues where not detected before? I can't imagine that no CI-system tests such simple testcases.

Part of the problem is that most distributions will only test with the kernel they ship and many don't provide packages for the vanilla kernel, let alone RC / git kernels.

[andyprough]

I've run all rc's for 4.14 on Tumbleweed with AppArmor enabled and haven't run into this problem. I grab the pre-built kernels from the openSUSE Kernel:HEAD project, where they are probably testing and configuring for this type of problem.

[Guest]

Lol, no wonder most people haven't encountered this problem yet, they're all probably using 16.04 LTS with kernel 4.8. Or for the people who are actually running 17.04 .......they are probably running 4.10 or 4.12 at best.

[DarkFoss]

I've had it on every 4.14 based kernel on 17.10. Looks like they've tracked it down to a missing commit 7 hours ago according to the 1st bug report.

https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1721278