]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
apparmor: fix setting unconfined mode on a loaded profile
authorJohn Johansen <john.johansen@canonical.com>
Sat, 26 Mar 2022 08:52:06 +0000 (01:52 -0700)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 25 Aug 2022 09:45:11 +0000 (11:45 +0200)
commitf91f50b890b1981f114d35cf76d85cfe751bb55c
treea0962abd169ab0078a0db1f17ce9f6594f61c8bd
parent705bfe4b620e027cad4591f316bc0c3b7bd0f6ca
apparmor: fix setting unconfined mode on a loaded profile

commit 3bbb7b2e9bbcd22e539e23034da753898fe3b4dc upstream.

When loading a profile that is set to unconfined mode, that label
flag is not set when it should be. Ensure it is set so that when
used in a label the unconfined check will be applied correctly.

Fixes: 038165070aa5 ("apparmor: allow setting any profile into the unconfined state")
Signed-off-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
security/apparmor/policy_unpack.c