[Apparmor-dev] AppArmor Kernel Module Bug
Bob Ziuchkovski
rziuchko at uccs.edu
Tue Oct 23 02:00:52 MDT 2007
Hello. I am not subscribed to this mailing list, so if you need additional
information please reply to my e-mail address (rziuchko .A. uccs.edu).
I've found that apparmor (version 2.1+993-0ubuntu3 on ubuntu gutsy) causes
problems with xl2tpd. Every time I try to connect to a l2tpd server, xl2tpd
crashes with a kernel dump showing the EIP is at an apparmor function:
"EIP is at apparmor_socket_getpeersec_dgram+0x0/0x10 [apparmor]".
It seems to be a problem with the apparmor kernel module in general, as I do
not have any profiles defined for xl2tpd and all works fine when I
modprobe -r apparmor. I've pasted the full output from my syslog pertaining
to the apparmor-induced xl2tpd crashes below.
Bob Z.
syslog output:
Oct 23 01:35:32 clarity kernel: [ 411.468000] CPU: 0
Oct 23 01:35:32 clarity kernel: [ 411.468000] EIP: 0060:[<f8833940>]
Tainted: P VLI
Oct 23 01:35:32 clarity kernel: [ 411.468000] EFLAGS: 00210246
(2.6.22-14-generic #1)
Oct 23 01:35:32 clarity kernel: [ 411.468000] EIP is at
apparmor_socket_getpeersec_dgram+0x0/0x10 [apparmor]
Oct 23 01:35:32 clarity kernel: [ 411.468000] eax: 00000000 ebx: f883a380
ecx: f21a5d18 edx: f472b180
Oct 23 01:35:32 clarity kernel: [ 411.468000] esi: f472b180 edi: f21a5f48
ebp: f5c60000 esp: f21a5cd8
Oct 23 01:35:32 clarity kernel: [ 411.468000] ds: 007b es: 007b fs: 00d8
gs: 0033 ss: 0068
Oct 23 01:35:32 clarity kernel: [ 411.468000] Process xl2tpd (pid: 7760,
ti=f21a4000 task=f40c8530 task.ti=f21a4000)
Oct 23 01:35:32 clarity kernel: [ 411.468000] Stack: c02ab006 00000079
00000079 c02808f7 00000081 00000079 f21a5d50 00000008
Oct 23 01:35:32 clarity kernel: [ 411.468000] c0280f41 f21a5d50
c02813a6 f5c6006c 00000000 f21a5f08 f472b180 00000000
Oct 23 01:35:32 clarity kernel: [ 411.468000] 00000000 00000000
00000000 f472b180 00000079 f21a5e98 f5c60000 c02c852e
Oct 23 01:35:32 clarity kernel: [ 411.468000] Call Trace:
Oct 23 01:35:32 clarity kernel: [ 411.468000] [ip_cmsg_recv+198/576]
ip_cmsg_recv+0xc6/0x240
Oct 23 01:35:32 clarity kernel: [ 411.468000] [memcpy_toiovec+55/96]
memcpy_toiovec+0x37/0x60
Oct 23 01:35:32 clarity kernel: [ 411.468000]
[skb_copy_datagram_iovec+337/528] skb_copy_datagram_iovec+0x151/0x210
Oct 23 01:35:32 clarity kernel: [ 411.468000] [skb_recv_datagram+326/544]
skb_recv_datagram+0x146/0x22
Oct 23 01:35:32 clarity kernel: [ 411.468000] [udp_recvmsg+558/592]
udp_recvmsg+0x22e/0x250
Oct 23 01:35:32 clarity kernel: [ 411.468000] [sock_common_recvmsg+71/112]
sock_common_recvmsg+0x47/0x70
Oct 23 01:35:32 clarity kernel: [ 411.468000] [sock_recvmsg+302/336]
sock_recvmsg+0x12e/0x150
Oct 23 01:35:32 clarity kernel: [ 411.468000]
[autoremove_wake_function+0/80] autoremove_wake_function+0x0/0x50
Oct 23 01:35:32 clarity kernel: [ 411.468000] [mntput_no_expire+36/160]
mntput_no_expire+0x24/0xa0
Oct 23 01:35:32 clarity kernel: [ 411.468000] [core_sys_sel
Oct 23 01:35:32 clarity kernel: [ 411.468000] [copy_from_use
Oct 23 01:35:32 clarity kernel: [ 411.468000] [sys_recvmsg+3
Oct 23 01:35:32 clarity kernel: [ 411.468000] [r
Oct 23 01:35:32 clarity kernel: [ 411.468000] [do_notify_resume+1072/1824]
do_notify_resume+0x430/0x720
Oct 23 01:35:32 clarity kernel: [ 411.468000] [getnstimeofday+54/208]
getnstimeofday+0x36/0xd0
Oct 23 01:35:32 clarity kernel: [ 411.468000] [enqueue_hrtimer+107/272]
enqueue_hrtimer+0x6b/0x110
Oct 23 01:35:32 clarity kernel: [ 411.468000] [hrtimer_start+201/304]
hrtimer_start+0xc9/0x130
Oct 23 01:35:32 clarity kernel: [ 411.468000] [sys_socketcall+618/640]
sys_socketcall+0x26a/0x280
Oct 23 01:35:32 clarity kernel: [ 411.468000] [sysenter_past_esp+107/169]
sysenter_past_esp+0x6b/0xa9
Oct 23 01:35:32 clarity kernel: [ 411.468000] =======================
Oct 23 01:35:32 clarity kernel: [ 411.468000] Code: 27 96 94 c7 85 c0 74 d3
8b 0c 24 89 c2 89 de 89 d7 8b 01 89 c1 c1 e9 02 f3 a5 89 c1 83 e1 03 74 02 f3
a4 eb 8b 90 90 90 90 90 90 <8b> 40 14 ba e9 66 83 f8 e9 a3 ed ff ff 8d 76 00
8b 40 14 ba 01
Oct 23 01:35:32 clarity kernel: [ 411.468000] EIP: [<f8833940>]
apparmor_socket_getpeersec_dgram+0x0/0x10 [apparmor] SS:ESP 0068:f21a5cd8
xl2tpd
More information about the Apparmor-dev
mailing list