summaryrefslogtreecommitdiffstats
path: root/security/apparmor/include/mount.h
diff options
context:
space:
mode:
authorJohn Johansen <john.johansen@canonical.com>2017-12-12 01:02:13 -0800
committerJohn Johansen <john.johansen@canonical.com>2018-02-09 11:30:01 -0800
commit3dc6b1ce6861ebf40b68ab4b752a05584a1f99bf (patch)
tree243c6b0514015415805b60cd183ea9e25ac0747b /security/apparmor/include/mount.h
parent1d6583d9c6723d78e446dd203ffd974f6b85ab76 (diff)
downloadlinux-stable-3dc6b1ce6861ebf40b68ab4b752a05584a1f99bf.tar.gz
linux-stable-3dc6b1ce6861ebf40b68ab4b752a05584a1f99bf.tar.bz2
linux-stable-3dc6b1ce6861ebf40b68ab4b752a05584a1f99bf.zip
apparmor: make signal label match work when matching stacked labels
Given a label with a profile stack of A//&B or A//&C ... A ptrace rule should be able to specify a generic trace pattern with a rule like signal send A//&**, however this is failing because while the correct label match routine is called, it is being done post label decomposition so it is always being done against a profile instead of the stacked label. To fix this refactor the cross check to pass the full peer label in to the label_match. Signed-off-by: John Johansen <john.johansen@canonical.com>
Diffstat (limited to 'security/apparmor/include/mount.h')
0 files changed, 0 insertions, 0 deletions