]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
apparmor: fix x_table_lookup when stacking is not the first entry
authorJohn Johansen <john.johansen@canonical.com>
Wed, 3 Jan 2024 05:54:30 +0000 (21:54 -0800)
committerJohn Johansen <john.johansen@canonical.com>
Sat, 18 Jan 2025 14:47:12 +0000 (06:47 -0800)
commita9eb185be84e998aa9a99c7760534ccc06216705
treebc135a79332094397d136435c4ab1e3f70fb852b
parent84c455decf27ce97a23fb70b58075592ab88d66a
apparmor: fix x_table_lookup when stacking is not the first entry

x_table_lookup currently does stacking during label_parse() if the
target specifies a stack but its only caller ensures that it will
never be used with stacking.

Refactor to slightly simplify the code in x_to_label(), this
also fixes a long standing problem where x_to_labels check on stacking
is only on the first element to the table option list, instead of
the element that is found and used.

Signed-off-by: John Johansen <john.johansen@canonical.com>
security/apparmor/domain.c