apparmor: remove the "task" arg from may_change_ptraced_domain()
authorOleg Nesterov <oleg@redhat.com>
Tue, 8 Oct 2013 12:46:03 +0000 (05:46 -0700)
committerJohn Johansen <john.johansen@canonical.com>
Wed, 30 Oct 2013 04:34:18 +0000 (21:34 -0700)
commit51775fe736f053329faf0f5de7c679ee4cb0023d
tree03c7edaa4b4e6b3d78528769202661ce4861a832
parent4a7fc3018f05f4305723b508b12f3be13b7c4875
apparmor: remove the "task" arg from may_change_ptraced_domain()

Unless task == current ptrace_parent(task) is not safe even under
rcu_read_lock() and most of the current users are not right.

So may_change_ptraced_domain(task) looks wrong as well. However it
is always called with task == current so the code is actually fine.
Remove this argument to make this fact clear.

Note: perhaps we should simply kill ptrace_parent(), it buys almost
nothing. And it is obviously racy, perhaps this should be fixed.

Signed-off-by: Oleg Nesterov <oleg@redhat.com>
Signed-off-by: John Johansen <john.johansen@canonical.com>
security/apparmor/domain.c