mirror of
https://gitlab.com/apparmor/apparmor.git
synced 2025-03-07 01:41:00 +01:00
a0efe08a97
which doesn't automatically mask of MAY_WRITE in inode_permission.
openat.patch - comment of o_creat bug, remove exit before last test
chdir.patch - add trailing /, give profile read permission to the directory
access.patch - give profile dir read permissions, update test rwx (r) to
fail since w - perm is no longer masked off.
13 lines
494 B
Diff
13 lines
494 B
Diff
Index: subdomain/access.sh
|
|
===================================================================
|
|
--- subdomain.orig/access.sh
|
|
+++ subdomain/access.sh
|
|
@@ -64,7 +64,7 @@ runchecktest "ACCESS dir rwx (rwx)" pass
|
|
genprofile $dir:$rperm
|
|
runchecktest "ACCESS dir r (r)" pass $dir r
|
|
runchecktest "ACCESS dir rx (r)" pass $dir rx
|
|
-runchecktest "ACCESS dir rwx (r)" pass $dir rwx
|
|
+runchecktest "ACCESS dir rwx (r)" fail $dir rwx
|
|
|
|
genprofile $dir:$wxperm
|
|
runchecktest "ACCESS dir x (wx)" pass $dir x
|