Merge branch 'cboltz-fix-deny-hat' into 'apparmor-2.13'

[2.11..2.13] handle_children: Fix denying of adding a hat

See merge request apparmor/apparmor!378

Acked-by: John Johansen <john.johansen@canonical.com>
This commit is contained in:
Christian Boltz 2019-05-02 22:19:12 +00:00
commit d2e83231f0

View file

@ -992,7 +992,7 @@ def handle_children(profile, hat, root):
hat = default_hat
elif ans == 'CMD_DENY':
# As unknown hat is denied no entry for it should be made
return None
continue
elif typ == 'capability':
# If capability then we (should) have pid, profile, hat, program, mode, capability