xavi/android_kernel_m2note/security/apparmor/lsm.c, branch ng-7.1.2Unnamed repository; edit this file 'description' to name the repository.
https://gitea.privatedns.org/xavi/android_kernel_m2note/atom?h=ng-7.1.22017-07-04T09:51:27+00:00apparmor: fix module parameters can be changed after policy is locked2017-07-04T09:51:27+00:00John Johansenjohn.johansen@canonical.com2016-06-23T01:01:08+00:00urn:sha1:66205a5891ee4cf555db5c3d86bc2257037b127b
commit 58acf9d911c8831156634a44d0b022d683e1e50c upstream.
the policy_lock parameter is a one way switch that prevents policy
from being further modified. Unfortunately some of the module parameters
can effectively modify policy by turning off enforcement.
split policy_admin_capable into a view check and a full admin check,
and update the admin check to test the policy_lock parameter.
Signed-off-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: Willy Tarreau <w@1wt.eu>
first commit2016-08-15T02:19:42+00:00Meizu OpenSourcepatchwork@meizu.com2016-08-15T02:19:42+00:00urn:sha1:d2e1446d81725c351dc73a03b397ce043fb18452