apparmor: verify loaded permission bits masks don't overlap
authorJohn Johansen <john.johansen@canonical.com>
Tue, 6 Sep 2022 07:38:20 +0000 (00:38 -0700)
committerJohn Johansen <john.johansen@canonical.com>
Mon, 3 Oct 2022 21:49:04 +0000 (14:49 -0700)
commit3bf3d728a58d7dcf2bbf179e3263fb8651f6097b
treedf69e5bb641129014e487a9cf3ae607bb327d025
parent3dfd16ab697ff23973b6fbb89808372bcd008dd1
apparmor: verify loaded permission bits masks don't overlap

Add an additional verification that loaded permission sets don't
overlap in ways that are not intended. This will help ensure that
permission accumulation can't result in an invalid permission set.

Signed-off-by: John Johansen <john.johansen@canonical.com>
security/apparmor/policy_unpack.c