John Johansen 384e4d832e apparmor: Fix abi check to include v8 abi ...

[ Upstream commit 1b5a6198f5a9d0aa5497da0dc4bcd4fc166ee516 ]

The v8 abi is supported by the kernel but the userspace supported
version check does not allow for it. This was missed when v8 was added
due to a bug in the userspace compiler which was setting an older abi
version for v8 encoding (which is forward compatible except on the
network encoding). However it is possible to detect the network
encoding by checking the policydb network support which the code
does. The end result was that missing the abi flag worked until
userspace was fixed and began correctly checking for the v8 abi
version.

Fixes: 56974a6fcfef ("apparmor: add base infastructure for socket mediation")
Signed-off-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2023-01-18 11:30:21 +01:00

..

include

apparmor: fix overlapping attachment computation

2022-08-25 11:15:36 +02:00

.gitignore

apparmor: add base infastructure for socket mediation

2018-03-13 17:25:48 -07:00

apparmorfs.c

apparmor: fix a memleak in multi_transaction_new()

2023-01-18 11:30:20 +01:00

audit.c

apparmor: fix quiet_denied for file rules

2022-08-25 11:15:35 +02:00

capability.c

LSM: generalize flag passing to security_capable

2020-01-23 08:21:29 +01:00

crypto.c

apparmor: use SHASH_DESC_ON_STACK

2017-04-07 08:58:35 +10:00

domain.c

apparmor: fix overlapping attachment computation

2022-08-25 11:15:36 +02:00

file.c

apparmor: Check buffer bounds when mapping permissions mask

2018-07-19 16:24:43 -07:00

ipc.c

LSM: generalize flag passing to security_capable

2020-01-23 08:21:29 +01:00

Kconfig

apparmor: add debug assert AA_BUG and Kconfig to control debug info

2017-01-16 01:18:24 -08:00

label.c

apparmor: fix aa_label_asxprint return check

2022-08-25 11:15:36 +02:00

lib.c

apparmor: Fix uninitialized value in aa_split_fqname

2018-11-27 16:13:00 +01:00

lsm.c

apparmor: don't try to replace stale label in ptraceme check

2020-06-30 23:17:03 -04:00

Makefile

apparmor: add base infastructure for socket mediation

2018-03-13 17:25:48 -07:00

match.c

apparmor: ensure that dfa state tables have entries

2020-07-22 09:32:06 +02:00

mount.c

apparmor: fix reference count leak in aa_pivotroot()

2022-08-25 11:15:36 +02:00

net.c

apparmor: Fix network performance issue in aa_label_sk_perm

2020-01-27 14:49:54 +01:00

nulldfa.in

apparmor: cleanup add proper line wrapping to nulldfa.in

2018-02-09 11:30:01 -08:00

path.c

apparmor: Move path lookup to using preallocated buffers

2017-06-08 11:29:34 -07:00

policy_ns.c

apparmor: fix an error code in __aa_create_ns()

2018-08-21 16:24:56 -07:00

policy_unpack.c

apparmor: Fix abi check to include v8 abi

2023-01-18 11:30:21 +01:00

policy.c

apparmor: fix lockdep warning when removing a namespace

2023-01-18 11:30:21 +01:00

procattr.c

apparmor: move context.h to cred.h

2018-02-09 11:30:01 -08:00

resource.c

LSM: generalize flag passing to security_capable

2020-01-23 08:21:29 +01:00

secid.c

apparmor: fix bad debug check in apparmor_secid_to_secctx()

2018-09-03 11:15:29 -07:00

stacksplitdfa.in

apparmor: use the dfa to do label parse string splitting

2018-02-09 11:30:01 -08:00

task.c

apparmor: update domain transitions that are subsets of confinement at nnp

2018-02-09 11:30:01 -08:00