projects / platform / kernel / linux-starfive.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 3bbb7b2) | patch
apparmor: fix overlapping attachment computation
authorJohn Johansen <john.johansen@canonical.com>
Sat, 26 Mar 2022 08:58:15 +0000 (01:58 -0700)
committerJohn Johansen <john.johansen@canonical.com>
Tue, 19 Jul 2022 09:52:36 +0000 (02:52 -0700)
commit2504db207146543736e877241f3b3de005cbe056
treefeaa7a3e2737a2bc8d2365c6e235c7755b5eacd6tree | snapshot
parent3bbb7b2e9bbcd22e539e23034da753898fe3b4dccommit | diff
apparmor: fix overlapping attachment computation

When finding the profile via patterned attachments, the longest left
match is being set to the static compile time value and not using the
runtime computed value.

Fix this by setting the candidate value to the greater of the
precomputed value or runtime computed value.

Fixes: 21f606610502 ("apparmor: improve overlapping domain attachment resolution")
Signed-off-by: John Johansen <john.johansen@canonical.com>
security/apparmor/domain.c diff | blob | history
security/apparmor/include/policy.h diff | blob | history
Domain: System / Kernel;