57cd0485a7
With apparmor 4, when recvmsg() calls are checked by the apparmor LSM they will always return EINVAL. This causes very weird issues when apparmor profiles are in use, and a lot of networking issues in containers (which are always using apparmor). When coming from sys_recvmsg, msg->msg_namelen is explicitly set to zero early on. (see ____sys_recvmsg in net/socket.c) We still end up in 'map_addr' where the assumption is that addr != NULL means addrlen has a valid size. This is likely not a final fix, it was suggested by jjohansen on irc to get things going until this is resolved properly. Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com> |
||
---|---|---|
.. | ||
0001-Make-mkcompile_h-accept-an-alternate-timestamp-strin.patch | ||
0002-wireless-Add-Debian-wireless-regdb-certificates.patch | ||
0003-bridge-keep-MAC-of-first-assigned-port.patch | ||
0004-pci-Enable-overrides-for-missing-ACS-capabilities-4..patch | ||
0005-kvm-disable-default-dynamic-halt-polling-growth.patch | ||
0006-net-core-downgrade-unregister_netdevice-refcount-lea.patch | ||
0007-Revert-fortify-Do-not-cast-to-unsigned-char.patch | ||
0008-kvm-xsave-set-mask-out-PKRU-bit-in-xfeatures-if-vCPU.patch | ||
0009-allow-opt-in-to-allow-pass-through-on-broken-hardwar.patch | ||
0010-KVM-nSVM-Advertise-support-for-flush-by-ASID.patch | ||
0011-revert-memfd-improve-userspace-warnings-for-missing-.patch | ||
0012-apparmor-expect-msg_namelen-0-for-recvmsg-calls.patch |