apparmor: fix setting unconfined mode on a loaded profile
authorJohn Johansen <john.johansen@canonical.com>
Sat, 26 Mar 2022 08:52:06 +0000 (01:52 -0700)
committerJohn Johansen <john.johansen@canonical.com>
Tue, 19 Jul 2022 09:43:12 +0000 (02:43 -0700)
commit3bbb7b2e9bbcd22e539e23034da753898fe3b4dc
tree185873661af713584a786862c01bcfd4e29678b0
parentf378973698657404f059687025e1e35f229b124c
apparmor: fix setting unconfined mode on a loaded profile

When loading a profile that is set to unconfined mode, that label
flag is not set when it should be. Ensure it is set so that when
used in a label the unconfined check will be applied correctly.

Fixes: 038165070aa5 ("apparmor: allow setting any profile into the unconfined state")
Signed-off-by: John Johansen <john.johansen@canonical.com>
security/apparmor/policy_unpack.c