iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/security/apparmor
History
John Johansen 3ed4aaa94f apparmor: fix nnp subset test for unconfined 
The subset test is not taking into account the unconfined exception
which will cause profile transitions in the stacked confinement
case to fail when no_new_privs is applied.

This fixes a regression introduced in the fix for
https://bugs.launchpad.net/bugs/1839037

BugLink: https://bugs.launchpad.net/bugs/1844186
Signed-off-by: John Johansen <john.johansen@canonical.com>
2020-01-21 05:58:04 -08:00
..
include
apparmor: fix nnp subset test for unconfined
2020-01-21 05:58:04 -08:00
.gitignore
apparmor: add base infastructure for socket mediation
2018-03-13 17:25:48 -07:00
apparmorfs.c
apparmor: remove useless aafs_create_symlink
2020-01-21 05:55:38 -08:00
audit.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441
2019-06-05 17:37:17 +02:00
capability.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441
2019-06-05 17:37:17 +02:00
crypto.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441
2019-06-05 17:37:17 +02:00
domain.c
apparmor: fix nnp subset test for unconfined
2020-01-21 05:58:04 -08:00
file.c
apparmor: only get a label reference if the fast path check fails
2020-01-02 05:31:40 -08:00
ipc.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441
2019-06-05 17:37:17 +02:00
Kconfig
+ Features
2019-12-03 12:51:35 -08:00
label.c
apparmor: fix nnp subset test for unconfined
2020-01-21 05:58:04 -08:00
lib.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441
2019-06-05 17:37:17 +02:00
lsm.c
+ Features
2019-12-03 12:51:35 -08:00
Makefile
apparmor: add base infastructure for socket mediation
2018-03-13 17:25:48 -07:00
match.c
apparmor: add consistency check between state and dfa diff encode flags
2020-01-18 15:37:49 -08:00
mount.c
apparmor: fix bind mounts aborting with -ENOMEM
2020-01-02 05:31:40 -08:00
net.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441
2019-06-05 17:37:17 +02:00
nulldfa.in
apparmor: cleanup add proper line wrapping to nulldfa.in
2018-02-09 11:30:01 -08:00
path.c
AppArmor: Remove semicolon
2020-01-18 15:36:58 -08:00
policy_ns.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441
2019-06-05 17:37:17 +02:00
policy_unpack.c
+ Features
2019-12-03 12:51:35 -08:00
policy.c
apparmor: fix aa_xattrs_match() may sleep while holding a RCU lock
2020-01-04 15:56:44 -08:00
procattr.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441
2019-06-05 17:37:17 +02:00
resource.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441
2019-06-05 17:37:17 +02:00
secid.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441
2019-06-05 17:37:17 +02:00
stacksplitdfa.in
apparmor: use the dfa to do label parse string splitting
2018-02-09 11:30:01 -08:00
task.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441
2019-06-05 17:37:17 +02:00