From ba21da64f6a547bd44956d71933030d529956bcd Mon Sep 17 00:00:00 2001 From: Nobuto Murata Date: Thu, 7 Jul 2022 09:37:28 +0900 Subject: [PATCH] Re-enable AppArmor enforcement MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Ensure tests are run with aa-profile-mode=enforce. So we should be able to notice any future behavioral changes in the upstream or additional rules required for nova-compute AppArmor profile in the functional tests. func-test-pr: https://github.com/openstack-charmers/zaza-openstack-tests/pull/870 Depends-Onː Id2db3a70b8d1287bda006f1bbc5442038f7070f1 Related-Bug: #1979812 Related-Bug: #1939389 Change-Id: If658d9e8ee11248ef09e774f3e21fe0f801dc066 --- tests/bundles/jammy-yoga.yaml | 3 +-- tests/bundles/jammy-zed.yaml | 3 +-- tests/bundles/kinetic-zed.yaml | 3 +-- 3 files changed, 3 insertions(+), 6 deletions(-) diff --git a/tests/bundles/jammy-yoga.yaml b/tests/bundles/jammy-yoga.yaml index 3db3ff0c..e56620f3 100644 --- a/tests/bundles/jammy-yoga.yaml +++ b/tests/bundles/jammy-yoga.yaml @@ -138,8 +138,7 @@ applications: options: config-flags: auto_assign_floating_ip=False enable-live-migration: false - # disable apparmor because of https://bugs.launchpad.net/charm-nova-compute/+bug/1979812 - # aa-profile-mode: enforce + aa-profile-mode: enforce #ephemeral-device: /dev/vdb #ephemeral-unmount: /mnt debug: true diff --git a/tests/bundles/jammy-zed.yaml b/tests/bundles/jammy-zed.yaml index 986182e1..5b2e79f8 100644 --- a/tests/bundles/jammy-zed.yaml +++ b/tests/bundles/jammy-zed.yaml @@ -138,8 +138,7 @@ applications: options: config-flags: auto_assign_floating_ip=False enable-live-migration: false - # disable apparmor because of https://bugs.launchpad.net/charm-nova-compute/+bug/1979812 - # aa-profile-mode: enforce + aa-profile-mode: enforce #ephemeral-device: /dev/vdb #ephemeral-unmount: /mnt debug: true diff --git a/tests/bundles/kinetic-zed.yaml b/tests/bundles/kinetic-zed.yaml index 47102974..67097486 100644 --- a/tests/bundles/kinetic-zed.yaml +++ b/tests/bundles/kinetic-zed.yaml @@ -138,8 +138,7 @@ applications: options: config-flags: auto_assign_floating_ip=False enable-live-migration: false - # disable apparmor because of https://bugs.launchpad.net/charm-nova-compute/+bug/1979812 - # aa-profile-mode: enforce + aa-profile-mode: enforce #ephemeral-device: /dev/vdb #ephemeral-unmount: /mnt debug: true