mirrors/apparmor
1
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor.git synced 2025-03-04 08:24:42 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

handle_children: Fix denying of adding a hat

Browse source 
Choosing "Deny" when handle_children() asks about adding a hat should
not add that hat, but it should _not_ leave the function because that
means all the other log events that were not migrated to prelog yet will
be lost.

Change "return" to "continue" to fix this.
This commit is contained in:
Christian Boltz 2019-05-02 22:42:03 +02:00
parent 21c3d57f8d
commit 87f91864be
Failed to generate hash of commit
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
utils/apparmor/aa.py
View file

@ -992,7 +992,7 @@ def handle_children(profile, hat, root):
hat = default_hat
elif ans == 'CMD_DENY':
# As unknown hat is denied no entry for it should be made
return None
continue
elif typ == 'capability':
# If capability then we (should) have pid, profile, hat, program, mode, capability