diff options
| author | John Johansen <[email protected]> | 2017-12-09 01:43:18 +0000 |
|---|---|---|
| committer | John Johansen <[email protected]> | 2018-01-12 23:49:59 +0000 |
| commit | 0dda0b3fb255048a221f736c8a2a24c674da8bf3 (patch) | |
| tree | 2e608fa9c885466ab5d833bcbaff76620ada5db9 /drivers/gpu/drm/amd/amdgpu/amdgpu_ucode.c | |
| parent | Merge branch 'x86-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/ker... (diff) | |
| download | kernel-0dda0b3fb255048a221f736c8a2a24c674da8bf3.tar.gz kernel-0dda0b3fb255048a221f736c8a2a24c674da8bf3.zip | |
apparmor: fix ptrace label match when matching stacked labels
Given a label with a profile stack of
A//&B or A//&C ...
A ptrace rule should be able to specify a generic trace pattern with
a rule like
ptrace trace A//&**,
however this is failing because while the correct label match routine
is called, it is being done post label decomposition so it is always
being done against a profile instead of the stacked label.
To fix this refactor the cross check to pass the full peer label in to
the label_match.
Fixes: 290f458a4f16 ("apparmor: allow ptrace checks to be finer grained than just capability")
Cc: Stable <[email protected]>
Reported-by: Matthew Garrett <[email protected]>
Tested-by: Matthew Garrett <[email protected]>
Signed-off-by: John Johansen <[email protected]>
Diffstat (limited to 'drivers/gpu/drm/amd/amdgpu/amdgpu_ucode.c')
0 files changed, 0 insertions, 0 deletions