]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
apparmor: make sure unix socket labeling is correctly updated.
authorJohn Johansen <john.johansen@canonical.com>
Fri, 20 Jun 2025 05:11:52 +0000 (22:11 -0700)
committerJohn Johansen <john.johansen@canonical.com>
Sun, 20 Jul 2025 09:19:27 +0000 (02:19 -0700)
commit88fec3526e84123997ecebd6bb6778eb4ce779b7
treed2bc332367530918e0abd2d34aeacb02462c916b
parent6456ccbd2ff72814b3c1b2e2a3a2145a2ced858d
apparmor: make sure unix socket labeling is correctly updated.

When a unix socket is passed into a different confinement domain make
sure its cached mediation labeling is updated to correctly reflect
which domains are using the socket.

Fixes: c05e705812d1 ("apparmor: add fine grained af_unix mediation")
Signed-off-by: John Johansen <john.johansen@canonical.com>
security/apparmor/af_unix.c
security/apparmor/file.c
security/apparmor/include/label.h
security/apparmor/include/net.h
security/apparmor/lsm.c
security/apparmor/net.c