apparmor: fix setting unconfined mode on a loaded profile
authorJohn Johansen <john.johansen@canonical.com>
Sat, 26 Mar 2022 08:52:06 +0000 (01:52 -0700)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 25 Aug 2022 09:40:00 +0000 (11:40 +0200)
commite89b95f91e632c662a3374abd8cb49f542d12ebf
treeb8f728164c226061d279fa888279f25194647582
parent3104c8a0dc5fd0779a6bc35e09dfdbe17e845dc7
apparmor: fix setting unconfined mode on a loaded profile

commit 3bbb7b2e9bbcd22e539e23034da753898fe3b4dc upstream.

When loading a profile that is set to unconfined mode, that label
flag is not set when it should be. Ensure it is set so that when
used in a label the unconfined check will be applied correctly.

Fixes: 038165070aa5 ("apparmor: allow setting any profile into the unconfined state")
Signed-off-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
security/apparmor/policy_unpack.c