]> git.baikalelectronics.ru Git - kernel.git/commit
apparmor: use the dfa to do label parse string splitting
authorJohn Johansen <john.johansen@canonical.com>
Wed, 6 Sep 2017 21:57:59 +0000 (14:57 -0700)
committerJohn Johansen <john.johansen@canonical.com>
Fri, 9 Feb 2018 19:30:01 +0000 (11:30 -0800)
commit8bc728eddd5cdec9c8a0fa72fe7d065701660673
tree9c15e28e85b9cc66984e3a6fdb7101a2ae2b0a58
parent3a2050a3f26c75bc0259b758227270d2190245a3
apparmor: use the dfa to do label parse string splitting

The current split scheme is actually wrong in that it splits
  ///&

where that is invalid and should fail. Use the dfa to do a proper
bounded split without having to worry about getting the string
processing right in code.

Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Seth Arnold <seth.arnold@canonical.com>
security/apparmor/include/label.h
security/apparmor/include/match.h
security/apparmor/label.c
security/apparmor/match.c
security/apparmor/stacksplitdfa.in [new file with mode: 0644]