]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/commit
UBUNTU SAUCE: apparmor: fix apparmor mediating locking non-fs, unix sockets
authorJohn Johansen <john.johansen@canonical.com>
Mon, 30 Jul 2018 20:55:00 +0000 (22:55 +0200)
committerStefan Bader <stefan.bader@canonical.com>
Tue, 14 Aug 2018 10:30:46 +0000 (12:30 +0200)
commitdabf9d01c29dd043ac59fa9f863057f55ac23939
tree85888eb72a4d1ffd8ec177108d28ada12f7fff91
parent971828d862549735438cf8710389a4636cb0311b
UBUNTU SAUCE: apparmor: fix apparmor mediating locking non-fs, unix sockets

The apparmor policy language current does not allow expressing of the
locking permission for no-fs unix sockets. However the kernel is
enforcing mediation.

Add the AA_MAY_LOCK perm to the computed perm mask which will grant
permission for all current abi profiles, but still allow specifying
auditing of the operation if needed.

BugLink: http://bugs.launchpad.net/bugs/1780227
Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Stefan Bader <stefan.bader@canonical.com>
Acked-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>
security/apparmor/lib.c