]> git.baikalelectronics.ru Git - kernel.git/commit
apparmor: fix ptrace read check
authorJohn Johansen <john.johansen@canonical.com>
Thu, 7 Jun 2018 07:45:30 +0000 (00:45 -0700)
committerJohn Johansen <john.johansen@canonical.com>
Thu, 7 Jun 2018 08:51:02 +0000 (01:51 -0700)
commit54d69796b8cfae3db7c65c4411cab0fc773f9d2c
treea35737ad4aff38dbb6f9b228ee1999fb8b51b894
parenta39690d2f33413b9d991a72583419a95f9a1b322
apparmor: fix ptrace read check

The ptrace read check is incorrect resulting in policy that is
broader than it needs to be. Fix the check so that read access
permission can be properly detected when other ptrace flags are
set.

Fixes: bbeb3ef20154 ("apparmor: move ptrace checks to using labels")
Signed-off-by: John Johansen <john.johansen@canonical.com>
security/apparmor/lsm.c