projects / GitHub / LineageOS / android_kernel_motorola_exynos9610.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 290638a) | patch
apparmor: ensure unconfined profiles have dfas initialized
authorJohn Johansen <john.johansen@canonical.com>
Wed, 16 Aug 2017 12:48:06 +0000 (05:48 -0700)
committerJohn Johansen <john.johansen@canonical.com>
Fri, 22 Sep 2017 20:00:58 +0000 (13:00 -0700)
commit15372b97aa7593c6f5bc1afe69f42fd403c40685
tree31992972666da995cce4785f88a7c87f0d6a6b8etree | snapshot (tar.gz zip)
parent290638a52a808d658bd04b746b3ca46886c157e0commit | diff
apparmor: ensure unconfined profiles have dfas initialized

Generally unconfined has early bailout tests and does not need the
dfas initialized, however if an early bailout test is ever missed
it will result in an oops.

Be defensive and initialize the unconfined profile to have null dfas
(no permission) so if an early bailout test is missed we fail
closed (no perms granted) instead of oopsing.

Signed-off-by: John Johansen <john.johansen@canonical.com>
security/apparmor/policy_ns.c diff | blob | blame | history