[Apparmor-dev] AppArmor Kernel Module Bug

Bob Ziuchkovski rziuchko at uccs.edu
Tue Oct 23 02:00:52 MDT 2007


Hello.  I am not subscribed to this mailing list, so if you need additional 
information please reply to my e-mail address (rziuchko .A. uccs.edu).

I've found that apparmor (version 2.1+993-0ubuntu3 on ubuntu gutsy) causes 
problems with xl2tpd.  Every time I try to connect to a l2tpd server, xl2tpd 
crashes with a kernel dump showing the EIP is at an apparmor function:

"EIP is at apparmor_socket_getpeersec_dgram+0x0/0x10 [apparmor]".

It seems to be a problem with the apparmor kernel module in general, as I do 
not have any profiles defined for xl2tpd and all works fine when I 
modprobe -r apparmor.  I've pasted the full output from my syslog pertaining 
to the apparmor-induced xl2tpd crashes below.

Bob Z.

syslog output:

Oct 23 01:35:32 clarity kernel: [  411.468000] CPU:    0
Oct 23 01:35:32 clarity kernel: [  411.468000] EIP:    0060:[<f8833940>]    
Tainted: P       VLI
Oct 23 01:35:32 clarity kernel: [  411.468000] EFLAGS: 00210246   
(2.6.22-14-generic #1)
Oct 23 01:35:32 clarity kernel: [  411.468000] EIP is at 
apparmor_socket_getpeersec_dgram+0x0/0x10 [apparmor]
Oct 23 01:35:32 clarity kernel: [  411.468000] eax: 00000000   ebx: f883a380   
ecx: f21a5d18   edx: f472b180
Oct 23 01:35:32 clarity kernel: [  411.468000] esi: f472b180   edi: f21a5f48   
ebp: f5c60000   esp: f21a5cd8
Oct 23 01:35:32 clarity kernel: [  411.468000] ds: 007b   es: 007b   fs: 00d8  
gs: 0033  ss: 0068
Oct 23 01:35:32 clarity kernel: [  411.468000] Process xl2tpd (pid: 7760, 
ti=f21a4000 task=f40c8530 task.ti=f21a4000)
Oct 23 01:35:32 clarity kernel: [  411.468000] Stack: c02ab006 00000079 
00000079 c02808f7 00000081 00000079 f21a5d50 00000008
Oct 23 01:35:32 clarity kernel: [  411.468000]        c0280f41 f21a5d50 
c02813a6 f5c6006c 00000000 f21a5f08 f472b180 00000000
Oct 23 01:35:32 clarity kernel: [  411.468000]        00000000 00000000 
00000000 f472b180 00000079 f21a5e98 f5c60000 c02c852e
Oct 23 01:35:32 clarity kernel: [  411.468000] Call Trace:
Oct 23 01:35:32 clarity kernel: [  411.468000]  [ip_cmsg_recv+198/576] 
ip_cmsg_recv+0xc6/0x240
Oct 23 01:35:32 clarity kernel: [  411.468000]  [memcpy_toiovec+55/96] 
memcpy_toiovec+0x37/0x60
Oct 23 01:35:32 clarity kernel: [  411.468000]  
[skb_copy_datagram_iovec+337/528] skb_copy_datagram_iovec+0x151/0x210
Oct 23 01:35:32 clarity kernel: [  411.468000]  [skb_recv_datagram+326/544] 
skb_recv_datagram+0x146/0x22
Oct 23 01:35:32 clarity kernel: [  411.468000]  [udp_recvmsg+558/592] 
udp_recvmsg+0x22e/0x250
Oct 23 01:35:32 clarity kernel: [  411.468000]  [sock_common_recvmsg+71/112] 
sock_common_recvmsg+0x47/0x70
Oct 23 01:35:32 clarity kernel: [  411.468000]  [sock_recvmsg+302/336] 
sock_recvmsg+0x12e/0x150
Oct 23 01:35:32 clarity kernel: [  411.468000]  
[autoremove_wake_function+0/80] autoremove_wake_function+0x0/0x50
Oct 23 01:35:32 clarity kernel: [  411.468000]  [mntput_no_expire+36/160] 
mntput_no_expire+0x24/0xa0
Oct 23 01:35:32 clarity kernel: [  411.468000]  [core_sys_sel
Oct 23 01:35:32 clarity kernel: [  411.468000]  [copy_from_use
Oct 23 01:35:32 clarity kernel: [  411.468000]  [sys_recvmsg+3
Oct 23 01:35:32 clarity kernel: [  411.468000]  [r
Oct 23 01:35:32 clarity kernel: [  411.468000]  [do_notify_resume+1072/1824] 
do_notify_resume+0x430/0x720
Oct 23 01:35:32 clarity kernel: [  411.468000]  [getnstimeofday+54/208] 
getnstimeofday+0x36/0xd0
Oct 23 01:35:32 clarity kernel: [  411.468000]  [enqueue_hrtimer+107/272] 
enqueue_hrtimer+0x6b/0x110
Oct 23 01:35:32 clarity kernel: [  411.468000]  [hrtimer_start+201/304] 
hrtimer_start+0xc9/0x130
Oct 23 01:35:32 clarity kernel: [  411.468000]  [sys_socketcall+618/640] 
sys_socketcall+0x26a/0x280
Oct 23 01:35:32 clarity kernel: [  411.468000]  [sysenter_past_esp+107/169] 
sysenter_past_esp+0x6b/0xa9
Oct 23 01:35:32 clarity kernel: [  411.468000]  =======================
Oct 23 01:35:32 clarity kernel: [  411.468000] Code: 27 96 94 c7 85 c0 74 d3 
8b 0c 24 89 c2 89 de 89 d7 8b 01 89 c1 c1 e9 02 f3 a5 89 c1 83 e1 03 74 02 f3 
a4 eb 8b 90 90 90 90 90 90 <8b> 40 14 ba e9 66 83 f8 e9 a3 ed ff ff 8d 76 00 
8b 40 14 ba 01
Oct 23 01:35:32 clarity kernel: [  411.468000] EIP: [<f8833940>] 
apparmor_socket_getpeersec_dgram+0x0/0x10 [apparmor] SS:ESP 0068:f21a5cd8
xl2tpd



More information about the Apparmor-dev mailing list