John Johansen 2a7ddbc773 Merge Ignore 'x' in mixed file mode log events ... Probably thanks to O_MAYEXEC, denials for file access can now contain a mix of x (exec) and other file permissions. The actual exec should appear in a separate "exec" log event, therefore ignore 'x' in file events for now if it's mixed with other permissions. Note that file events ("open", "link" etc.) that contain denied_mask="x" without another permission will still cause an error. (So far, this hasn't been seen in the wild.) Fixes: https://gitlab.com/apparmor/apparmor/-/issues/303 Also add the log line from the bugreport and the (for now) expected result as test_multi testcase. I propose this patch for all branches. Closes #303 MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/1001 Approved-by: John Johansen <john@jjmx.net> Merged-by: John Johansen <john@jjmx.net> (cherry picked from commit cf6539b217) Signed-off-by: John Johansen <john.johansen@canonical.com>		2023-03-31 20:14:17 -07:00
..
libapparmor	Merge Ignore 'x' in mixed file mode log events	2023-03-31 20:14:17 -07:00