]> git.baikalelectronics.ru Git - kernel.git/commit
apparmor: fix profile attachment for special unconfined profiles
authorJohn Johansen <john.johansen@canonical.com>
Sat, 18 Nov 2017 02:04:37 +0000 (18:04 -0800)
committerJohn Johansen <john.johansen@canonical.com>
Tue, 21 Nov 2017 10:17:15 +0000 (02:17 -0800)
commita6b70277799f03c326721a79dbc72e60e022932b
tree091eb02fcc08a49c0cdb60094403bfc4ec398186
parentb20e898f49feac6ef7e54c38439a59590715e267
apparmor: fix profile attachment for special unconfined profiles

It used to be that unconfined would never attach. However that is not
the case anymore as some special profiles can be marked as unconfined,
that are not the namespaces unconfined profile, and may have an
attachment.

Fixes: 12b3105b2fcf ("apparmor: add the base fns() for domain labels")
Signed-off-by: John Johansen <john.johansen@canonical.com>
security/apparmor/domain.c