kernel_google_wahoo

Files

John Johansen 04b029c359 apparmor: fix module parameters can be changed after policy is locked

commit 58acf9d911c8831156634a44d0b022d683e1e50c upstream.

the policy_lock parameter is a one way switch that prevents policy
from being further modified. Unfortunately some of the module parameters
can effectively modify policy by turning off enforcement.

split policy_admin_capable into a view check and a full admin check,
and update the admin check to test the policy_lock parameter.

Signed-off-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2019-11-25 15:54:22 +01:00

apparmor.h

Apparmor: mediated_filesystem() should use dentry->d_sb not inode->i_sb

2015-02-22 11:38:39 -05:00

apparmorfs.h

apparmor: add the ability to report a sha1 hash of loaded policy

2013-08-14 11:42:08 -07:00

audit.h

apparmor: remove parent task info from audit logging

2013-10-29 21:34:04 -07:00

capability.h

apparmor: fix capability to not use the current task, during reporting