iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/security/apparmor
History
Georgia Garcia 7b2384f7eb apparmor: unpack transition table if dfa is not present 
[ Upstream commit e0ff0cff1f6cdce0aa596aac04129893201c4162 ]

Due to a bug in earlier userspaces, a transition table may be present
even when the dfa is not. Commit 7572fea31e3e
("apparmor: convert fperm lookup to use accept as an index") made the
verification check more rigourous regressing old userspaces with
the bug. For compatibility reasons allow the orphaned transition table
during unpack and discard.

Fixes: 7572fea31e3e ("apparmor: convert fperm lookup to use accept as an index")
Signed-off-by: Georgia Garcia <georgia.garcia@canonical.com>
Signed-off-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2024-08-03 09:01:08 +02:00
..
include
ima: Avoid blocking in RCU read-side critical section
2024-06-13 14:26:50 -04:00
.gitignore
.gitignore: add SPDX License Identifier
2020-03-25 11:50:48 +01:00
apparmorfs.c
+ Features
2024-01-19 10:53:55 -08:00
audit.c
ima: Avoid blocking in RCU read-side critical section
2024-06-13 14:26:50 -04:00
capability.c
apparmor: Fix some kernel-doc comments
2023-10-23 00:25:49 -07:00
crypto.c
apparmor: switch SECURITY_APPARMOR_HASH from sha1 to sha256
2023-11-19 00:47:56 -08:00
domain.c
apparmor: declare stack_msg as static
2023-11-19 00:48:12 -08:00
file.c
apparmor: refcount the pdb
2023-10-18 15:30:47 -07:00
ipc.c
apparmor: refcount the pdb
2023-10-18 15:30:47 -07:00
Kconfig
apparmor: switch SECURITY_APPARMOR_HASH from sha1 to sha256
2023-11-19 00:47:56 -08:00
label.c
apparmor: refcount the pdb
2023-10-18 15:30:47 -07:00
lib.c
apparmor: fix possible memory leak in unpack_trans_table
2024-01-04 01:34:00 -08:00
lsm.c
apparmor: Fix null pointer deref when receiving skb during sock creation
2024-08-03 09:01:04 +02:00
Makefile
+ Features
2022-12-14 13:42:09 -08:00
match.c
apparmor: refcount the pdb
2023-10-18 15:30:47 -07:00
mount.c
apparmor: Fix move_mount mediation by detecting if source is detached
2024-01-03 12:10:29 -08:00
net.c
apparmor: refcount the pdb
2023-10-18 15:30:47 -07:00
nulldfa.in
apparmor: cleanup add proper line wrapping to nulldfa.in
2018-02-09 11:30:01 -08:00
path.c
security: apparmor: delete repeated words in comments
2021-02-07 04:15:46 -08:00
policy_compat.c
apparmor: fixup return comments for kernel doc cleanups by Gaosheng Cui
2023-08-08 13:12:19 -07:00
policy_ns.c
apparmor: remove unused functions in policy_ns.c/.h
2023-10-15 21:44:31 -07:00
policy_unpack_test.c
apparmor: fix use of strcpy in policy_unpack_test
2023-07-06 10:58:49 -07:00
policy_unpack.c
apparmor: unpack transition table if dfa is not present
2024-08-03 09:01:08 +02:00
policy.c
apparmor: use kvfree_sensitive to free data->data
2024-08-03 09:00:35 +02:00
procattr.c
AppArmor: Add selfattr hooks
2023-11-12 22:54:42 -05:00
resource.c
apparmor: pass cred through to audit info.
2023-10-18 15:30:38 -07:00
secid.c
apparmor: fix kernel-doc complaints
2023-01-10 10:04:35 -08:00
stacksplitdfa.in
apparmor: use the dfa to do label parse string splitting
2018-02-09 11:30:01 -08:00
task.c
apparmor: add missing params to aa_may_ptrace kernel-doc comments
2023-11-19 01:19:41 -08:00