]> git.proxmox.com Git - mirror_ubuntu-zesty-kernel.git/commitdiff
UBUNTU: SAUCE: apparmor: null profiles should inherit parent control flags
authorJohn Johansen <john.johansen@canonical.com>
Thu, 12 Jan 2017 23:12:25 +0000 (15:12 -0800)
committerTim Gardner <tim.gardner@canonical.com>
Mon, 20 Feb 2017 03:57:58 +0000 (20:57 -0700)
null profiles that don't have the same control flags as the parent
behave in unexpected ways and can cause failures.

BugLink: http://bugs.launchpad.net/bugs/1656121
Signed-off-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: Tim Gardner <tim.gardner@canonical.com>
security/apparmor/policy.c

index f2ffcf109e28b0efd8cd2fa66f53a5e723657e62..f5f286ab70b42860f9477ac64d45226499124511 100644 (file)
@@ -350,6 +350,7 @@ name:
        profile->label.flags |= FLAG_NULL;
        if (hat)
                profile->label.flags |= FLAG_HAT;
+       profile->path_flags = parent->path_flags;
 
        /* released on free_profile */
        rcu_assign_pointer(profile->parent, aa_get_profile(parent));