Bug#990089: linux-image-4.19.0-17-amd64: lxc-attach fails with Failed to set AppArmor label unconfined

[Salvatore Bonaccorso <carnil@debian.org>]

Hi,

On Mon, Jun 21, 2021 at 10:24:31AM +0100, Gmail wrote:
> Salvatore,
> 
> On Sun, 2021-06-20 at 20:39 +0200, Salvatore Bonaccorso wrote:
> > Hi Mark,
> > 
> > On Sun, Jun 20, 2021 at 10:44:29AM +0100, Mark Grant wrote:
> > > Package: src:linux
> > > Version: 4.19.194-1
> > > Severity: normal
> > > 
> > > Dear Maintainer,
> > > 
> > > After upgrading from linux-image-4.19.0-16-amd64 to linux-image-
> > > 4.19.0-17-amd64
> > > attaching an unprivileged linux container fails with the message:
> > > lxc-attach: debian-buster-amd64-basic: lsm/lsm.c:
> > > lsm_process_label_set_at: 174
> > > Operation not permitted - Failed to set AppArmor label "unconfined"
> > > Rebooting into linux-image-4.19.0-16-amd64 with no other changes,
> > > the lxc
> > > system works as expected.
> > 
> > I think this is the same issue as in #990072, would you be able to
> > test the patch as commited
> > https://salsa.debian.org/kernel-team/linux/-/commit/d3fc7c8514bed949d8797cfd3a50a1bed95629c0
> > ?
> > 
> I can confirm that the patch fixed the problem. Many thanks.

Again, thanks. An update is pending and will be released once we have
the builds.

Regards,
Salvatore