]> git.baikalelectronics.ru Git - kernel.git/commit
apparmor: fix regression in mount mediation when feature set is pinned
authorJohn Johansen <john.johansen@canonical.com>
Thu, 7 Dec 2017 08:28:27 +0000 (00:28 -0800)
committerJohn Johansen <john.johansen@canonical.com>
Fri, 5 Jan 2018 23:07:42 +0000 (15:07 -0800)
commiteb408838e3c88012ce8a9c87eafca9267d0c5e80
treeb3c7dc808d1a67ca1bd9379c532af6e1a67b643f
parenta84115cf8f1b7e7f9af05092818090627e3dae6d
apparmor: fix regression in mount mediation when feature set is pinned

When the mount code was refactored for Labels it was not correctly
updated to check whether policy supported mediation of the mount
class.  This causes a regression when the kernel feature set is
reported as supporting mount and policy is pinned to a feature set
that does not support mount mediation.

BugLink: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=882697#41
Fixes: 650380a97cee ("apparmor: add mount mediation")
Reported-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Cc: Stable <stable@vger.kernel.org>
Signed-off-by: John Johansen <john.johansen@canonical.com>
security/apparmor/mount.c