mirror of
https://gitlab.com/apparmor/apparmor.git
synced 2025-03-09 02:41:03 +01:00
40e193e623
BugLink: https://launchpad.net/bugs/1588069 Currently change_profile /** -> A, change_profile unsafe /** -> A, do not conflict because the safe rules only set the change_profile permission where the unsafe set unsafe exec. To fix this we have the safe version set exec bits as well with out setting unsafe exec. This allows the exec conflict logic to detect any conflicts. This is safe to do even for older kernels as the exec bits off of the 2nd term encoding in the change_onexec rules are unused. Test files tst/simple_tests/change_profile/onx_no_conflict_safe1.sd tst/simple_tests/change_profile/onx_no_conflict_safe2.sd by Christian Boltz <apparmor@cboltz.de> Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Tyler Hicks <tyhicks@canonical.com> |
||
|---|---|---|
| .. | ||
| bare_include_tests | ||
| capability | ||
| change_hat | ||
| change_profile | ||
| conditional | ||
| dbus | ||
| file | ||
| include_tests | ||
| includes | ||
| includes-preamble | ||
| mount | ||
| network | ||
| profile | ||
| ptrace | ||
| rewrite | ||
| rlimits | ||
| signal | ||
| unix | ||
| vars | ||
| xtrans | ||
| readme | ||
Directory for auto generated x-transition tests