Tyler Hicks 85be9528ec parser: Allow AF_UNSPEC family in network rules ... https://launchpad.net/bugs/1546455 Don't filter out AF_UNSPEC from the list of valid protocol families so that the parser will accept rules such as 'network unspec,'. There are certain syscalls, such as socket(2), where the LSM hooks are called before the protocol family is validated. In these cases, AppArmor was emitting denials even though socket(2) will eventually fail. There may be cases where AF_UNSPEC sockets are accepted and we need to make sure that we're mediating those appropriately. Signed-off-by: Tyler Hicks <tyhicks@canonical.com> Suggested-by: Steve Beattie <steve@nxnw.org> Acked-by: John Johansen <john.johansen@canonical.com> [cboltz: Add 'unspec' to the network domain keywords of the utils]		2016-02-18 16:31:56 -06:00
..
apparmor	parser: Allow AF_UNSPEC family in network rules	2016-02-18 16:31:56 -06:00
distro	Import the rest of the core functionality of the internal apparmor	2006-04-11 21:52:54 +00:00
Makefile	This patch fixes up a bit that leaked into kees' commit rev 1727	2011-05-23 16:05:10 -07:00