]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
apparmor: fix policy_compat permission remap with extended permissions
authorJohn Johansen <john.johansen@canonical.com>
Fri, 10 Mar 2023 23:59:45 +0000 (15:59 -0800)
committerJohn Johansen <john.johansen@canonical.com>
Thu, 6 Jul 2023 17:58:49 +0000 (10:58 -0700)
commit0bac2002b397fda7c9ea81ee0b06a02242958107
treed1155124fcaafd381715680f83b5db669ab221ca
parentba808cb5edfdf032db9e849e194d28169b6efbcd
apparmor: fix policy_compat permission remap with extended permissions

If the extended permission table is present we should not be attempting
to do a compat_permission remap as the compat_permissions are not
stored in the dfa accept states.

Fixes: fd1b2b95a211 ("apparmor: add the ability for policy to specify a permission table")
Signed-off-by: John Johansen <john.johansen@canonical.com>
Reviewed-by: Jon Tourville <jontourville@me.com>
security/apparmor/policy_unpack.c