apparmor: checkpoint_restore capability missing with 5.10
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
AppArmor |
New
|
Undecided
|
Unassigned |
Bug Description
Running apparmor's autopkgtest on the latest 5.10 kernel shows the following error:
autopkgtest [10:55:41]: test test-installed: [------
Running tests in /tmp/tmp.
cc -g -O2 -pipe -Wall -Wsign-compare -Wmissing-
cc -g -O2 -pipe -Wall -Wsign-compare -Wmissing-
cc -g -O2 -pipe -Wall -Wsign-compare -Wmissing-
cc -g -O2 -pipe -Wall -Wsign-compare -Wmissing-
cc -g -O2 -pipe -Wall -Wsign-compare -Wmissing-
no tests atm
Running tests in /tmp/tmp.
g++ -g -O2 -pipe -D_GNU_SOURCE -Wall -Wall -Wsign-compare -Wmissing-
g++ -g -O2 -pipe -D_GNU_SOURCE -Wall -Wall -Wsign-compare -Wmissing-
g++ -g -O2 -pipe -D_GNU_SOURCE -Wall -Wall -Wsign-compare -Wmissing-
bison -d --define=
flex -B -v --noyy_top_state -oparser_lex.c parser_lex.l
parser_lex.l:716: undeclared start condition RLIMIT_MODEINCLUDE
flex version 2.6.4 usage statistics:
scanner options: -svB8 -Cem -oparser_lex.c
1195/2000 NFA states
511/1000 DFA states (5205 words)
82 rules
Compressed tables always back-up
22/40 start conditions
622 epsilon states, 453 double epsilon states
133/200 character classes needed 4635/4750 words of storage, 0 reused
21262 state/nextstate pairs created
2231/19031 unique/duplicate transitions
623/1000 base-def entries created
4120/6000 (peak 8283) nxt-chk entries created
2240/7500 (peak 6272) template nxt-chk entries created
352 empty table entries
128 protos created
112 templates created, 282 uses
56/256 equivalence classes created
20/256 meta-equivalence classes created
0 (49 saved) hash collisions, 1765 DFAs equal
22 sets of reallocations needed
9798 total table entries needed
g++ -g -O2 -pipe -D_GNU_SOURCE -Wall -Wall -Wsign-compare -Wmissing-
g++ -g -O2 -pipe -D_GNU_SOURCE -Wall -Wall -Wsign-compare -Wmissing-
../common/
+{"checkpoint_
Error: new capabilities detected please update base_cap_names.h with values from generated_
Adding the following line to base_cap_names.h seems to fix the problem:
{"checkpoint_
debdiff in attach seems to fix the autopkgtest error on 5.10.