John Johansen 5b9f57cf47 apparmor: fix regression in mount mediation when feature set is pinned ...

When the mount code was refactored for Labels it was not correctly
updated to check whether policy supported mediation of the mount
class.  This causes a regression when the kernel feature set is
reported as supporting mount and policy is pinned to a feature set
that does not support mount mediation.

BugLink: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=882697#41
Fixes: 2ea3ffb7782a ("apparmor: add mount mediation")
Reported-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Cc: Stable <stable@vger.kernel.org>
Signed-off-by: John Johansen <john.johansen@canonical.com>

2018-01-05 15:07:42 -08:00

..

include

bug fixes:

2017-11-30 18:56:41 -05:00

.gitignore

…

apparmorfs.c

Rename superblock flags (MS_xyz -> SB_xyz)

2017-11-27 13:05:09 -08:00

audit.c

…

capability.c

…

context.c

…

crypto.c

…

domain.c

apparmor: fix locking when creating a new complain profile.

2017-11-21 02:17:15 -08:00

file.c

apparmor: initialized returned struct aa_perms

2017-11-21 02:15:50 -08:00

ipc.c

apparmor: fix off-by-one comparison on MAXMAPPED_SIG

2017-11-08 10:56:22 -08:00

Kconfig

…

label.c

+ Cleanups

2017-11-23 20:48:26 -10:00

lib.c

apparmor: remove unused redundant variable stop

2017-11-21 02:17:13 -08:00

lsm.c

+ Cleanups

2017-11-23 20:48:26 -10:00

Makefile

…

match.c

…

mount.c

apparmor: fix regression in mount mediation when feature set is pinned

2018-01-05 15:07:42 -08:00

nulldfa.in

…

path.c

…

policy_ns.c

apparmor: fix possible recursive lock warning in __aa_create_ns

2017-11-21 02:17:16 -08:00

policy_unpack.c

apparmor: fix possible recursive lock warning in __aa_create_ns

2017-11-21 02:17:16 -08:00

policy.c

apparmor: fix possible recursive lock warning in __aa_create_ns

2017-11-21 02:17:16 -08:00

procattr.c

…

resource.c

apparmor: fix spelling mistake: "resoure" -> "resource"

2017-11-21 00:25:44 -08:00

secid.c

…