mirror of
https://gitlab.com/apparmor/apparmor.git
synced 2025-03-04 08:24:42 +01:00
The AppArmor user space development project.
5e5d91ba76
Subject: apparmor: Subdomain.pm: Fix handling of audits of unconfined processes The version of AppArmor that was accepted into the mainline kernel issues audit events for things like change_hat while unconfined. Previous versions just returned -EPERM without the audit. This results in logprof and friends spewing uninitialized value errors when it hits events like: type=AVC msg=audit(1291742101.899:220): apparmor="DENIED" operation="change_hat" info="unconfined" error=-1 pid=28005 comm="cron ... which happen any time an unconfined process does something with pam when pam_apparmor is installed. This patch skips those events. [Note that the second half of the OpenSUSE patch had already been applied.] Signed-off-by: Jeff Mahoney <jeffm@suse.com> Acked-By: Steve Beattie <sbeattie@ubuntu.com> |
||
|---|---|---|
| changehat | ||
| common | ||
| deprecated/management | ||
| kernel-patches | ||
| libraries/libapparmor | ||
| parser | ||
| profiles | ||
| tests | ||
| utils | ||
| .bzrignore | ||
| LICENSE | ||
| Makefile | ||