apparmor: fix logging of the existence test for signals
authorJohn Johansen <john.johansen@canonical.com>
Thu, 1 Feb 2018 10:24:10 +0000 (11:24 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 19 Apr 2018 06:56:18 +0000 (08:56 +0200)
commit1d0d8beb35cd5ae375c5192ba01794594688e248
tree69b9b6ee211aeddde9d55cf3267fda45732689b7
parentb18daa09fefe5c7a1b35419734012469287b9504
apparmor: fix logging of the existence test for signals

commit 98cf5bbff413eadf1b9cb195a7b80cc61c72a50e upstream.

The existence test is not being properly logged as the signal mapping
maps it to the last entry in the named signal table. This is done
to help catch bugs by making the 0 mapped signal value invalid so
that we can catch the signal value not being filled in.

When fixing the off-by-one comparision logic the reporting of the
existence test was broken, because the logic behind the mapped named
table was hidden. Fix this by adding a define for the name lookup
and using it.

Cc: Stable <stable@vger.kernel.org>
Fixes: f7dc4c9a855a1 ("apparmor: fix off-by-one comparison on MAXMAPPED_SIG")
Signed-off-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
security/apparmor/include/sig_names.h
security/apparmor/ipc.c