[apparmor] [patch 17/12] v3 unix socket rules

John Johansen john.johansen at canonical.com
Thu Sep 4 16:19:53 UTC 2014


Fix the permission encoding output of getopt/setopt

Signed-off-by: John Johansen <john.johansen at canonical.com>

---

=== modified file 'parser/af_unix.cc'
--- parser/af_unix.cc	2014-08-31 17:15:54 +0000
+++ parser/af_unix.cc	2014-09-04 16:12:04 +0000
@@ -385,7 +385,7 @@
 			tmp << "..";
 			buf = tmp.str();
 			if (!prof.policy.rules->add_rule(buf.c_str(), deny,
-							 map_perms(AA_NET_OPT),
+							 map_perms(mask & AA_NET_OPT),
 							 map_perms(audit & AA_NET_OPT),
 							 dfaflags))
 				goto fail;





More information about the AppArmor mailing list