linux

mirror of https://github.com/FEX-Emu/linux.git synced 2025-02-16 01:42:43 +00:00

History

John Johansen 844b8292b6 apparmor: ensure that undecidable profile attachments fail

Profiles that have an undecidable overlap in their attachments are
being incorrectly handled. Instead of failing to attach the first one
encountered is being used.

eg.
  profile A /** { .. }
  profile B /*foo { .. }

have an unresolvable longest left attachment, they both have an exact
match on / and then have an overlapping expression that has no clear
winner.

Currently the winner will be the profile that is loaded first which
can result in non-deterministic behavior. Instead in this situation
the exec should fail.

Fixes: 898127c34ec0 ("AppArmor: functions for domain transitions")
Signed-off-by: John Johansen <john.johansen@canonical.com>

2017-11-21 02:17:14 -08:00

apparmor

apparmor: ensure that undecidable profile attachments fail

2017-11-21 02:17:14 -08:00

integrity

Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security

2017-07-05 11:26:35 -07:00

keys

KEYS: load key flags and expiry time atomically in proc_keys_show()

2017-10-18 09:12:41 +01:00

loadpin

security: mark LSM hooks as __ro_after_init