Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CONFIG_DEFAULT_SECURITY_APPARMOR=n not working for Nitrogen8MM unless CONFIG_SECURITY_APPARMOR=n #377

Open
acostach opened this issue Apr 11, 2023 · 1 comment

Comments

@acostach
Copy link
Contributor

acostach commented Apr 11, 2023

The default security is still set to apparmor unless apparmor is completely disabled. The OS sets CONFIG_DEFAULT_SECURITY_APPARMOR=n but this is not the final result during a build, we need to look into why this happens.

Internal thread https://balena.zulipchat.com/#narrow/stream/345889-balena-io.2Fos/topic/multicontainer.20sample.20app.20fails.20to.20start.20in.20v2.2E113.2E35/near/348391746

Connects to balena-os/meta-balena#3099

@acostach
Copy link
Contributor Author

acostach commented Apr 11, 2023

The generic-x86-64 is on kirkstone, has kernel 5.15 and also has DEFAULT_SECURITY_APPARMOR=y in the defconfig but it ends up disabled in the final config even if meta-balena doesn't set it to n.

For the Nitrogen this is still not disabled, neither with kernel 5.15 (not yet published by BSP) and kirkstone.
Needs further investigation

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant