apparmor/tests
Tyler Hicks ae9d172f7e parser: Allow AF_UNSPEC family in network rules
https://launchpad.net/bugs/1546455

Don't filter out AF_UNSPEC from the list of valid protocol families so
that the parser will accept rules such as 'network unspec,'.

There are certain syscalls, such as socket(2), where the LSM hooks are
called before the protocol family is validated. In these cases, AppArmor
was emitting denials even though socket(2) will eventually fail. There
may be cases where AF_UNSPEC sockets are accepted and we need to make
sure that we're mediating those appropriately.

Signed-off-by: Tyler Hicks <tyhicks@canonical.com>
Suggested-by: Steve Beattie <steve@nxnw.org>
Acked-by: John Johansen <john.johansen@canonical.com>
2016-02-18 12:33:20 -06:00
..
regression parser: Allow AF_UNSPEC family in network rules 2016-02-18 12:33:20 -06:00
stress This patch fixes up a bit that leaked into kees' commit rev 1727 2011-05-23 16:05:10 -07:00
Makefile This patch fixes up a bit that leaked into kees' commit rev 1727 2011-05-23 16:05:10 -07:00