mirror of
https://gitlab.com/apparmor/apparmor.git
synced 2025-03-04 00:14:44 +01:00
Merge from trunk rev 1789: logprof and genprof were creating Px and
Cx execute permissions with the modifiers as lowercase (meaning to pass on sensitive environment variables to the exec'ed process) even if the user told them not to when prompted. This patch fixes the issue. Nominated-by: Steve Beattie <steve@nxnw.org> Acked-by: John Johansen <john.johansen@canonical.com>
This commit is contained in:
parent
e35765bed2
commit
3dfebc380d
1 changed files with 1 additions and 1 deletions
|
@ -2257,7 +2257,7 @@ sub handlechildren($$$) {
|
|||
my $ynans = UI_YesNo($px_mesg, $px_default);
|
||||
$ans = "CMD_$match";
|
||||
if ($ynans eq "y") {
|
||||
$exec_mode &= ~$AA_EXEC_UNSAFE;
|
||||
$exec_mode &= ~($AA_EXEC_UNSAFE | ($AA_EXEC_UNSAFE << $AA_OTHER_SHIFT));
|
||||
}
|
||||
} elsif ($ans eq "CMD_ux") {
|
||||
$exec_mode = str_to_mode("ux");
|
||||
|
|
Loading…
Add table
Reference in a new issue