]> git.proxmox.com Git - mirror_ubuntu-jammy-kernel.git/commit
UBUNTU SAUCE: apparmor: fix apparmor mediating locking non-fs, unix sockets
authorJohn Johansen <john.johansen@canonical.com>
Mon, 30 Jul 2018 20:55:30 +0000 (13:55 -0700)
committerPaolo Pisati <paolo.pisati@canonical.com>
Tue, 2 Nov 2021 07:24:43 +0000 (08:24 +0100)
commitd7410054784d8aa0e313f9eeb6110a791420f3d3
tree86ecc840904c34780331d374fb83a86c555e07e3
parent16b160cc7387418077615425c1eff442a529397b
UBUNTU SAUCE: apparmor: fix apparmor mediating locking non-fs, unix sockets

The apparmor policy language current does not allow expressing of the
locking permission for no-fs unix sockets. However the kernel is
enforcing mediation.

Add the AA_MAY_LOCK perm to the computed perm mask which will grant
permission for all current abi profiles, but still allow specifying
auditing of the operation if needed.

BugLink: http://bugs.launchpad.net/bugs/1780227
Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Acked-by: Stefan Bader <stefan.bader@canonical.com>
Acked-by: Acked-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>
Signed-off-by: Seth Forshee <seth.forshee@canonical.com>
security/apparmor/lib.c