projects / linux-2.6-block.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 844b829) | patch
apparmor: fix profile attachment for special unconfined profiles
authorJohn Johansen <john.johansen@canonical.com>
Sat, 18 Nov 2017 02:04:37 +0000 (18:04 -0800)
committerJohn Johansen <john.johansen@canonical.com>
Tue, 21 Nov 2017 10:17:15 +0000 (02:17 -0800)
commit06d426d113fe0b3107939e81db920ca7b097e97c
tree091eb02fcc08a49c0cdb60094403bfc4ec398186tree | snapshot
parent844b8292b6311ecd30ae63db1471edb26e01d895commit | diff
apparmor: fix profile attachment for special unconfined profiles

It used to be that unconfined would never attach. However that is not
the case anymore as some special profiles can be marked as unconfined,
that are not the namespaces unconfined profile, and may have an
attachment.

Fixes: f1bd904175e8 ("apparmor: add the base fns() for domain labels")
Signed-off-by: John Johansen <john.johansen@canonical.com>
security/apparmor/domain.c diff | blob | blame | history
Linux 6.x block layer and io_uring tree(s)