Change Details

apparmor tests, usysconf, and snaps are failing when rebuilding apparmor against python 3.7 `make check -C parser` tests are failing with (all tests fail with the same error) ``` ====================================================================== FAIL: test_profile_newer_rewrites_cache (__main__.AAParserAltCacheTests) ---------------------------------------------------------------------- Traceback (most recent call last): File "/home/build/YPKG/root/apparmor/build/apparmor-2.13.3/parser/tst/testlib.py", line 50, in new_unittest_func return unittest_func(self) File "./caching.py", line 448, in test_profile_newer_rewrites_cache self._generate_cache_file() File "./caching.py", line 257, in _generate_cache_file self.run_cmd_check(cmd) File "/home/build/YPKG/root/apparmor/build/apparmor-2.13.3/parser/tst/testlib.py", line 73, in run_cmd_check self.assertEqual(rc, expected_rc, "Got return code %d, expected %d\nCommand run: %s\nOutput: %s" % (rc, expected_rc, (' '.join(command)), report)) AssertionError: 1 != 0 : Got return code 1, expected 0 Command run: ../apparmor_parser --config-file=./parser.conf --base /tmp/aa-caching-u0nkahl3 --skip-kernel-load -M ./features_files/features.all --cache-loc /tmp/aa-caching-u0nkahl3/cache --cache-loc /tmp/aa-caching-u0nkahl3/aa-alt-cachebwg43d16 -q --write-cache -r /tmp/aa-caching-u0nkahl3/sbin.pingy Output: AppArmor parser error for /tmp/aa-caching-u0nkahl3/sbin.pingy in /tmp/aa-caching-u0nkahl3/suid-abstraction at line 3: Invalid capability setuid. ``` Forcing the package to build breaks snaps ``` snap-confine has elevated permissions and is not confined but should be. Refusing to continue to avoid permission escalation attacks ``` usysconf is not happy either ``` [✗] Compiling and Reloading AppArmor profiles failed A copy of the command output follows: AppArmor parser error for /etc/apparmor.d/bin.ping in /etc/apparmor.d/abstractions/nis at line 14: Invalid capability net_bind_service. failed to update AppArmor profile, reason: exit status 1 [✗] Compiling and Reloading AppArmor profiles failed A copy of the command output follows: AppArmor parser error for /etc/apparmor.d/bin.ping in /etc/apparmor.d/abstractions/nis at line 14: Invalid capability net_bind_service. failed to update AppArmor profile, reason: exit status 1 ``` Making this task to get more eyes on the issue. My knowledge of apparmor and snaps is very thin.

apparmor tests, usysconf, and snaps are failing when rebuilding apparmor against python 3.7 `make check -C parser` tests are failing with (all tests fail with the same error) ``` ====================================================================== FAIL: test_profile_newer_rewrites_cache (__main__.AAParserAltCacheTests) ---------------------------------------------------------------------- Traceback (most recent call last): File "/home/build/YPKG/root/apparmor/build/apparmor-2.13.3/parser/tst/testlib.py", line 50, in new_unittest_func return unittest_func(self) File "./caching.py", line 448, in test_profile_newer_rewrites_cache self._generate_cache_file() File "./caching.py", line 257, in _generate_cache_file self.run_cmd_check(cmd) File "/home/build/YPKG/root/apparmor/build/apparmor-2.13.3/parser/tst/testlib.py", line 73, in run_cmd_check self.assertEqual(rc, expected_rc, "Got return code %d, expected %d\nCommand run: %s\nOutput: %s" % (rc, expected_rc, (' '.join(command)), report)) AssertionError: 1 != 0 : Got return code 1, expected 0 Command run: ../apparmor_parser --config-file=./parser.conf --base /tmp/aa-caching-u0nkahl3 --skip-kernel-load -M ./features_files/features.all --cache-loc /tmp/aa-caching-u0nkahl3/cache --cache-loc /tmp/aa-caching-u0nkahl3/aa-alt-cachebwg43d16 -q --write-cache -r /tmp/aa-caching-u0nkahl3/sbin.pingy Output: AppArmor parser error for /tmp/aa-caching-u0nkahl3/sbin.pingy in /tmp/aa-caching-u0nkahl3/suid-abstraction at line 3: Invalid capability setuid. ``` Forcing the package to build breaks snaps ``` $ snap run spotify snap-confine has elevated permissions and is not confined but should be. Refusing to continue to avoid permission escalation attacks ``` usysconf is not happy either ``` [✗] Compiling and Reloading AppArmor profiles failed A copy of the command output follows: AppArmor parser error for /etc/apparmor.d/bin.ping in /etc/apparmor.d/abstractions/nis at line 14: Invalid capability net_bind_service. failed to update AppArmor profile, reason: exit status 1 ``` Making this task to get more eyes on the issue. My knowledge of apparmor and snaps is very thin.

apparmor tests, usysconf, and snaps are failing when rebuilding apparmor against python 3.7 `make check -C parser` tests are failing with (all tests fail with the same error) ``` ====================================================================== FAIL: test_profile_newer_rewrites_cache (__main__.AAParserAltCacheTests) ---------------------------------------------------------------------- Traceback (most recent call last): File "/home/build/YPKG/root/apparmor/build/apparmor-2.13.3/parser/tst/testlib.py", line 50, in new_unittest_func return unittest_func(self) File "./caching.py", line 448, in test_profile_newer_rewrites_cache self._generate_cache_file() File "./caching.py", line 257, in _generate_cache_file self.run_cmd_check(cmd) File "/home/build/YPKG/root/apparmor/build/apparmor-2.13.3/parser/tst/testlib.py", line 73, in run_cmd_check self.assertEqual(rc, expected_rc, "Got return code %d, expected %d\nCommand run: %s\nOutput: %s" % (rc, expected_rc, (' '.join(command)), report)) AssertionError: 1 != 0 : Got return code 1, expected 0 Command run: ../apparmor_parser --config-file=./parser.conf --base /tmp/aa-caching-u0nkahl3 --skip-kernel-load -M ./features_files/features.all --cache-loc /tmp/aa-caching-u0nkahl3/cache --cache-loc /tmp/aa-caching-u0nkahl3/aa-alt-cachebwg43d16 -q --write-cache -r /tmp/aa-caching-u0nkahl3/sbin.pingy Output: AppArmor parser error for /tmp/aa-caching-u0nkahl3/sbin.pingy in /tmp/aa-caching-u0nkahl3/suid-abstraction at line 3: Invalid capability setuid. ``` Forcing the package to build breaks snaps ``` $ snap run spotify snap-confine has elevated permissions and is not confined but should be. Refusing to continue to avoid permission escalation attacks ``` usysconf is not happy either ``` [✗] Compiling and Reloading AppArmor profiles failed A copy of the command output follows: AppArmor parser error for /etc/apparmor.d/bin.ping in /etc/apparmor.d/abstractions/nis at line 14: Invalid capability net_bind_service. failed to update AppArmor profile, reason: exit status 1 [✗] Compiling and Reloading AppArmor profiles failed A copy of the command output follows: AppArmor parser error for /etc/apparmor.d/bin.ping in /etc/apparmor.d/abstractions/nis at line 14: Invalid capability net_bind_service. failed to update AppArmor profile, reason: exit status 1 ``` Making this task to get more eyes on the issue. My knowledge of apparmor and snaps is very thin.