apparmor: fixup secid map conversion to using IDR
authorJohn Johansen <john.johansen@canonical.com>
Tue, 5 Jun 2018 02:44:59 +0000 (19:44 -0700)
committerJohn Johansen <john.johansen@canonical.com>
Thu, 7 Jun 2018 08:50:49 +0000 (01:50 -0700)
commita4c3f89c9b5a9fab5a8e4ea05399acd6e23072df
tree7a92b037adce16071b0ca0207115b7d8f434c5c6
parent99cc45e486786c7215a7e39824c3bbaf7cf2fc08
apparmor: fixup secid map conversion to using IDR

The IDR conversion did not handle an error case for when allocating a
mapping fails, and it did not ensure that mappings did not allocate or
use a 0 value, which is used as an invalid secid. Which is used when a
mapping fails.

Fixes: 3ae7eb49a2be ("apparmor: Use an IDR to allocate apparmor secids")
Signed-off-by: John Johansen <john.johansen@canonical.com>
security/apparmor/include/secid.h
security/apparmor/label.c
security/apparmor/lsm.c
security/apparmor/secid.c