]> git.proxmox.com Git - mirror_ubuntu-zesty-kernel.git/commit
UBUNTU: SAUCE: apparmor: fix cross ns perm of unix domain sockets
authorJohn Johansen <john.johansen@canonical.com>
Sat, 12 Nov 2016 00:05:57 +0000 (16:05 -0800)
committerTim Gardner <tim.gardner@canonical.com>
Mon, 20 Feb 2017 03:57:58 +0000 (20:57 -0700)
commit1c1bc45a7253ca43eb4617f63674741fe5178f04
tree7e1f8685f1879199e279314087ba23944a4777da
parentfcc009ef1face5c4bb86bb1313cac01e316081d0
UBUNTU: SAUCE: apparmor: fix cross ns perm of unix domain sockets

When using nested namespaces policy within the nested namespace is trying
to cross validate with policy outside of the namespace that is not
visible to it. This results the access being denied and with no way to
add a rule to policy that would allow it.

The check should only be done again policy that is visible.

BugLink: http://bugs.launchpad.net/bugs/1660832
Signed-off-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: Tim Gardner <tim.gardner@canonical.com>
security/apparmor/af_unix.c