apparmor: force auditing of conflicting attachment execs from confined
authorRyan Lee <ryan.lee@canonical.com>
Fri, 2 May 2025 00:55:46 +0000 (17:55 -0700)
committerJohn Johansen <john.johansen@canonical.com>
Mon, 26 May 2025 03:15:01 +0000 (20:15 -0700)
commit16916b17b4f80f99aad2ad29ad112313539ad219
tree0c1053f92a6b8793f41c468cc28cafa9084f0696
parentb824b5f82bbc8ace0982391a1718b04a1f93346e
apparmor: force auditing of conflicting attachment execs from confined

Conflicting attachment paths are an error state that result in the
binary in question executing under an unexpected ix/ux fallback. As such,
it should be audited to record the occurrence of conflicting attachments.

Signed-off-by: Ryan Lee <ryan.lee@canonical.com>
Signed-off-by: John Johansen <john.johansen@canonical.com>
security/apparmor/domain.c