]> git.baikalelectronics.ru Git - kernel.git/commit
apparmor: fix regression in mount mediation when feature set is pinned
authorJohn Johansen <john.johansen@canonical.com>
Thu, 7 Dec 2017 08:28:27 +0000 (00:28 -0800)
committerJohn Johansen <john.johansen@canonical.com>
Fri, 5 Jan 2018 23:07:42 +0000 (15:07 -0800)
commit69be4045a9db5b3fb19f8dce71d93e6406fc487b
treeb3c7dc808d1a67ca1bd9379c532af6e1a67b643f
parent6ebfdc2edb3a84fa6b52ee806b0bc6b765b33b3e
apparmor: fix regression in mount mediation when feature set is pinned

When the mount code was refactored for Labels it was not correctly
updated to check whether policy supported mediation of the mount
class.  This causes a regression when the kernel feature set is
reported as supporting mount and policy is pinned to a feature set
that does not support mount mediation.

BugLink: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=882697#41
Fixes: 559bef1f8ff1 ("apparmor: add mount mediation")
Reported-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Cc: Stable <stable@vger.kernel.org>
Signed-off-by: John Johansen <john.johansen@canonical.com>
security/apparmor/mount.c