]> git.proxmox.com Git - mirror_ubuntu-zesty-kernel.git/commit
UBUNTU: SAUCE: apparmor: Fix new to old label comparison for domain transitions
authorJohn Johansen <john.johansen@canonical.com>
Mon, 23 May 2016 19:01:26 +0000 (12:01 -0700)
committerTim Gardner <tim.gardner@canonical.com>
Mon, 20 Feb 2017 03:57:58 +0000 (20:57 -0700)
commitae3f556b8f2e6331ea63cf965225ef34a317e972
treecd9b71ad7353142eaa5feeeb19006330e12c9a2d
parent46275f559e5a810f6030839e449c7bb425134f80
UBUNTU: SAUCE: apparmor: Fix new to old label comparison for domain transitions

For the purposes of inherit we should be treating a profile/label transition
to its replacement as if the replacement is the profile/label.

So make the comparison based off of the label proxy, not the label itself.

BugLink: http://bugs.launchpad.net/bugs/1615880
Signed-off-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: Leann Ogasawara <leann.ogasawara@canonical.com>
Signed-off-by: Tim Gardner <tim.gardner@canonical.com>
security/apparmor/domain.c