[PATCH 13/14] UBUNTU: SAUCE: apparmor: null profiles should inherit parent control flags

John Johansen john.johansen at canonical.com
Wed Feb 1 09:13:09 UTC 2017


null profiles that don't have the same control flags as the parent
behave in unexpected ways and can cause failures.

BugLink: http://bugs.launchpad.net/bugs/1656121
Signed-off-by: John Johansen <john.johansen at canonical.com>
---
 security/apparmor/policy.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/security/apparmor/policy.c b/security/apparmor/policy.c
index f2ffcf1..f5f286a 100644
--- a/security/apparmor/policy.c
+++ b/security/apparmor/policy.c
@@ -350,6 +350,7 @@ name:
 	profile->label.flags |= FLAG_NULL;
 	if (hat)
 		profile->label.flags |= FLAG_HAT;
+	profile->path_flags = parent->path_flags;
 
 	/* released on free_profile */
 	rcu_assign_pointer(profile->parent, aa_get_profile(parent));
-- 
2.9.3





More information about the kernel-team mailing list