aboutsummaryrefslogtreecommitdiff
path: root/security/apparmor/include
Commit message (Collapse)AuthorAgeFilesLines
* apparmor: fix module parameters can be changed after policy is lockedJohn Johansen2017-07-021-0/+2
| | | | | | | | | | | | | | commit 58acf9d911c8831156634a44d0b022d683e1e50c upstream. the policy_lock parameter is a one way switch that prevents policy from being further modified. Unfortunately some of the module parameters can effectively modify policy by turning off enforcement. split policy_admin_capable into a view check and a full admin check, and update the admin check to test the policy_lock parameter. Signed-off-by: John Johansen <john.johansen@canonical.com> Signed-off-by: Willy Tarreau <w@1wt.eu>
* apparmor: add missing id bounds check on dfa verificationJohn Johansen2017-07-021-0/+1
| | | | | | | commit 15756178c6a65b261a080e21af4766f59cafc112 upstream. Signed-off-by: John Johansen <john.johansen@canonical.com> Signed-off-by: Willy Tarreau <w@1wt.eu>
* first commitMeizu OpenSource2016-08-1515-0/+1402