stackonexec, stackprofile in test_regression_testsuite from ubuntu_qrt_apparmor failed with F/ein

Bug #2092515 reported by Po-Hsu Lin
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
QA Regression Testing
New
Undecided
Unassigned
ubuntu-kernel-tests
New
Undecided
Unassigned

Bug Description

Similar to bug 1996171.

Test stackonexec and stackprofile from ApparmorTestsuites.test_regression_testsuite in ubuntu_qrt_apparmor failed with F/ein 5.4.0-1062

This is the first time we run this test on this kernel.

Test log:
 Running 'python2 ./test-apparmor.py -v ApparmorTestsuites.test_regression_testsuite'
 Running test: './test-apparmor.py' distro: 'Ubuntu 20.04' kernel: '5.4.0-1062.70 (Ubuntu 5.4.0-1062.70-ein 5.4.284)' arch: 'arm64' init: 'systemd' uid: 0/0 SUDO_USER: 'ubuntu')
 test_regression_testsuite (__main__.ApparmorTestsuites)
 Skipping private tests

 Run kernel regression tests ... (Applying patch 0001-tests-regression-apparmor-syscall.sh-fail-iopl-ioper.patch) (Applying patch 0001-tests-regression-apparmor-capabilities.sh-fail-iopl-.patch) (Applying patch use-pyflakes3-with-2.13.patch) (Applying patch 0001-regression-tests-add-FIPS-140-2-lib-validation-hmac-.patch) (Applying patch tests-fix-variable-type-for-getopt.patch) (Applying patch tests-parse-result-of-multiple-lines-in-output.patch) FAIL

 ======================================================================
 FAIL: test_regression_testsuite (__main__.ApparmorTestsuites)
   preparing apparmor_2.13.3-7ubuntu5.4.dsc... done

  (disabling ptrace for this test)
 Run kernel regression tests
 ----------------------------------------------------------------------
 Traceback (most recent call last):
   File "./test-apparmor.py", line 2161, in test_regression_testsuite
     self.assertEqual(expected, rc, result + report)
 AssertionError: Got exit code 2, expected 0

 running aa_exec

 running access
 xfail: ACCESS file rx (r)
 xfail: ACCESS file rwx (r)
 xfail: ACCESS file r (wx)
 xfail: ACCESS file rx (wx)
 xfail: ACCESS file rwx (wx)
 xfail: ACCESS dir rwx (r)
 xfail: ACCESS dir r (wx)
 xfail: ACCESS dir rx (wx)
 xfail: ACCESS dir rwx (wx)

 running at_secure

 running introspect

 running capabilities
         (ptrace)
         (sethostname)
         (setdomainname)
         (setpriority)
         (setscheduler)
         (reboot)
         (chroot)
         (mlockall)
         (net_raw)

 running changeprofile

 running onexec

 running changehat

 running changehat_fork

 running changehat_misc

 *** A 'Killed' message from bash is expected for the following test
 /tmp/testlibrgg0Sp/source/focal/apparmor-2.13.3/tests/regression/apparmor/prologue.inc: line 264: 50266 Killed $testexec "$@" > $outfile 2>&1

 *** A 'Killed' message from bash is expected for the following test
 /tmp/testlibrgg0Sp/source/focal/apparmor-2.13.3/tests/regression/apparmor/prologue.inc: line 264: 50299 Killed $testexec "$@" > $outfile 2>&1

 running chdir

 running clone

 running coredump
 *** A 'Segmentation Fault' message from bash is expected for the following test
 /tmp/testlibrgg0Sp/source/focal/apparmor-2.13.3/tests/regression/apparmor/prologue.inc: line 264: 50549 Segmentation fault (core dumped) $testexec "$@" > $outfile 2>&1

 *** A 'Segmentation Fault' message from bash is expected for the following test
 /tmp/testlibrgg0Sp/source/focal/apparmor-2.13.3/tests/regression/apparmor/prologue.inc: line 264: 50578 Segmentation fault $testexec "$@" > $outfile 2>&1

 *** A 'Segmentation Fault' message from bash is expected for the following test
 /tmp/testlibrgg0Sp/source/focal/apparmor-2.13.3/tests/regression/apparmor/prologue.inc: line 264: 50613 Segmentation fault $testexec "$@" > $outfile 2>&1

 *** A 'Segmentation Fault' message from bash is expected for the following test
 /tmp/testlibrgg0Sp/source/focal/apparmor-2.13.3/tests/regression/apparmor/prologue.inc: line 264: 50648 Segmentation fault $testexec "$@" > $outfile 2>&1

 *** A 'Segmentation Fault' message from bash is expected for the following test
 /tmp/testlibrgg0Sp/source/focal/apparmor-2.13.3/tests/regression/apparmor/prologue.inc: line 264: 50683 Segmentation fault $testexec "$@" > $outfile 2>&1
 XFAIL: Error: corefile present when not expected -- COREDUMP (ix confinement)

 running deleted

 running environ

 running exec

 running exec_qual

 running fchdir

 running fd_inheritance

 running fork

 running i18n

 running link

 running link_subset

 running mkdir

 running mmap

 running mount
     not supported by kernel - skipping mount options=(symfollow,nosymfollow),
     using mount rules ...
     not supported by parser - skipping mount options=(nodirsync),

 running mult_mount

 running named_pipe

 running namespaces

 running net_raw

 running open

 running openat

 running pipe

 running pivot_root
     kernel does not support pivot_root domain transitions - skipping tests ...

 running posix_ipc
 Warning: invalid capability description 'cap:sys_resource:deny', ignored
 Warning: invalid capability description 'cap:sys_resource:deny', ignored
 Warning: invalid capability description 'cap:sys_resource:deny', ignored
 Warning: invalid capability description 'cap:sys_resource:deny', ignored
 Warning: invalid capability description 'cap:sys_resource:deny', ignored
 Warning: invalid capability description 'cap:sys_resource:deny', ignored
 Warning: invalid capability description 'cap:sys_resource:deny', ignored
 Warning: invalid capability description 'cap:sys_resource:deny', ignored
 Warning: invalid capability description 'cap:sys_resource:deny', ignored
 Warning: invalid capability description 'cap:sys_resource:deny', ignored
 Warning: invalid capability description 'cap:sys_resource:deny', ignored
 Warning: invalid capability description 'cap:sys_resource:deny', ignored
 Warning: invalid capability description 'cap:sys_resource:deny', ignored
 Warning: invalid capability description 'cap:sys_resource:deny', ignored
 Warning: invalid capability description 'cap:sys_resource:deny', ignored
 Warning: invalid capability description 'cap:sys_resource:deny', ignored
 Warning: invalid capability description 'cap:sys_resource:deny', ignored
 xpass: POSIX MQUEUE (confined root - mqueue label 1)
 xpass: POSIX MQUEUE (confined root - mqueue label 1 : mq_notify)
 xpass: POSIX MQUEUE (confined root - mqueue label 1 : select)
 xpass: POSIX MQUEUE (confined root - mqueue label 1 : poll)
 xpass: POSIX MQUEUE (confined root - mqueue label 1 : epoll)
 Warning: invalid capability description 'cap:sys_resource:deny', ignored
 xpass: POSIX MQUEUE (confined root - mqueue label 2)
 xpass: POSIX MQUEUE (confined root - mqueue label 2 : mq_notify)
 xpass: POSIX MQUEUE (confined root - mqueue label 2 : select)
 xpass: POSIX MQUEUE (confined root - mqueue label 2 : poll)
 xpass: POSIX MQUEUE (confined root - mqueue label 2 : epoll)
 Warning: invalid capability description 'cap:sys_resource:deny', ignored
 Warning: invalid capability description 'cap:sys_resource:deny', ignored
 Warning: invalid capability description 'cap:sys_resource:deny', ignored
 Warning: invalid capability description 'cap:sys_resource:deny', ignored
 Warning: invalid capability description 'cap:sys_resource:deny', ignored
 Warning: invalid capability description 'cap:sys_resource:deny', ignored
 Warning: invalid capability description 'cap:sys_resource:deny', ignored
 Warning: invalid capability description 'cap:sys_resource:deny', ignored
 Warning: invalid capability description 'cap:sys_resource:deny', ignored
 Warning: invalid capability description 'cap:sys_resource:deny', ignored
 Warning: invalid capability description 'cap:sys_resource:deny', ignored
 Warning: invalid capability description 'cap:sys_resource:deny', ignored
 Warning: invalid capability description 'cap:sys_resource:deny', ignored
 Warning: invalid capability description 'cap:sys_resource:deny', ignored
 Warning: invalid capability description 'cap:sys_resource:deny', ignored
 Warning: invalid capability description 'cap:sys_resource:deny', ignored
 Warning: invalid capability description 'cap:sys_resource:deny', ignored
 xpass: POSIX MQUEUE (confined 1002 - mqueue label 1)
 xpass: POSIX MQUEUE (confined 1002 - mqueue label 1 : mq_notify)
 xpass: POSIX MQUEUE (confined 1002 - mqueue label 1 : select)
 xpass: POSIX MQUEUE (confined 1002 - mqueue label 1 : poll)
 xpass: POSIX MQUEUE (confined 1002 - mqueue label 1 : epoll)
 Warning: invalid capability description 'cap:sys_resource:deny', ignored
 xpass: POSIX MQUEUE (confined 1002 - mqueue label 2)
 xpass: POSIX MQUEUE (confined 1002 - mqueue label 2 : mq_notify)
 xpass: POSIX MQUEUE (confined 1002 - mqueue label 2 : select)
 xpass: POSIX MQUEUE (confined 1002 - mqueue label 2 : poll)
 xpass: POSIX MQUEUE (confined 1002 - mqueue label 2 : epoll)

 running ptrace
    using ptrace v6 tests ...

 running pwrite

 running query_label

 running regex

 running rename

 running readdir

 running rw

 running socketpair

 running swap
 mkswap: /tmp/sdtest.97022-20180-w9Bu03/swapfile: insecure permissions 0644, 0600 suggested.
 swapon: /tmp/sdtest.97022-20180-w9Bu03/swapfile: insecure permissions 0644, 0600 suggested.

 running sd_flags

 running setattr

 running symlink

 running syscall
     WARNING: syscall sysctl not implemented, skipping tests ...

 running sysv_ipc
 Required feature 'ipc/sysv_mqueue' not available.. Skipping tests ...

 running tcp

 running unix_fd_server

 running unix_socket_pathname
 xpass: AF_UNIX pathname socket (dgram); confined server w/ access (rw)
 xpass: AF_UNIX pathname socket (dgram); confined client w/ access (rw)

 running unix_socket_abstract

 running unix_socket_unnamed
 xpass: AF_UNIX unnamed socket (dgram); confined server (peer label w/ implicit perms)
 xpass: AF_UNIX unnamed socket (dgram); confined server (peer label w/ explicit perms)
 xpass: AF_UNIX unnamed socket (dgram); confined server (peer label, peer addr)
 xpass: AF_UNIX unnamed socket (dgram); confined server (type, peer label, peer addr)
 xpass: AF_UNIX unnamed socket (dgram); confined server (type, addr, peer label)
 xpass: AF_UNIX unnamed socket (dgram); confined server (type, addr, peer label, peer addr)

 running unlink

 running xattrs
 Required feature 'file/xattr' not available.. Skipping tests ...

 running longpath
 XFAIL: This version of AppArmor does not support changing buffer size.

 running dbus_eavesdrop
 dbus[110294]: Unable to set up transient service directory: XDG_RUNTIME_DIR "/run/user/1000" is owned by uid 1000, not our uid 0

 running dbus_message
 dbus[110577]: Unable to set up transient service directory: XDG_RUNTIME_DIR "/run/user/1000" is owned by uid 1000, not our uid 0

 running dbus_service
 dbus[111251]: Unable to set up transient service directory: XDG_RUNTIME_DIR "/run/user/1000" is owned by uid 1000, not our uid 0

 running dbus_unrequested_reply
 dbus[111637]: Unable to set up transient service directory: XDG_RUNTIME_DIR "/run/user/1000" is owned by uid 1000, not our uid 0

 running aa_policy_cache

 running exec_stack

 running stackonexec
 Error: transition failed. Test 'STACKONEXEC (stacked with unconfined - file)' was expected to 'fail'. Reason for failure expect errno 13 != 0

 running stackprofile
 Error: transition failed. Test 'STACKPROFILE (stacked with unconfined - file)' was expected to 'fail'. Reason for failure expect errno 13 != 0
 make: *** [Makefile:318: tests] Error 1

 ----------------------------------------------------------------------
 Ran 1 test in 1070.659s

 FAILED (failures=1)

Po-Hsu Lin (cypressyew)
tags: added: sru-20241028
removed: 20241028
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.