Searched hist:cf797c0e (Results 1 – 6 of 6) sorted by relevance
| /openbmc/linux/security/apparmor/ |
| H A D | procattr.c | cf797c0e Fri Jun 09 04:08:28 CDT 2017 John Johansen <john.johansen@canonical.com> apparmor: convert to profile block critical sections
There are still a few places where profile replacement fails to update
and a stale profile is used for mediation. Fix this by moving to
accessing the current label through a critical section that will
always ensure mediation is using the current label regardless of
whether the tasks cred has been updated or not.
Signed-off-by: John Johansen <john.johansen@canonical.com>
cf797c0e Fri Jun 09 04:08:28 CDT 2017 John Johansen <john.johansen@canonical.com> apparmor: convert to profile block critical sections
There are still a few places where profile replacement fails to update
and a stale profile is used for mediation. Fix this by moving to
accessing the current label through a critical section that will
always ensure mediation is using the current label regardless of
whether the tasks cred has been updated or not.
Signed-off-by: John Johansen <john.johansen@canonical.com>
|
| H A D | resource.c | cf797c0e Fri Jun 09 04:08:28 CDT 2017 John Johansen <john.johansen@canonical.com> apparmor: convert to profile block critical sections
There are still a few places where profile replacement fails to update
and a stale profile is used for mediation. Fix this by moving to
accessing the current label through a critical section that will
always ensure mediation is using the current label regardless of
whether the tasks cred has been updated or not.
Signed-off-by: John Johansen <john.johansen@canonical.com>
cf797c0e Fri Jun 09 04:08:28 CDT 2017 John Johansen <john.johansen@canonical.com> apparmor: convert to profile block critical sections
There are still a few places where profile replacement fails to update
and a stale profile is used for mediation. Fix this by moving to
accessing the current label through a critical section that will
always ensure mediation is using the current label regardless of
whether the tasks cred has been updated or not.
Signed-off-by: John Johansen <john.johansen@canonical.com>
|
| H A D | domain.c | cf797c0e Fri Jun 09 04:08:28 CDT 2017 John Johansen <john.johansen@canonical.com> apparmor: convert to profile block critical sections
There are still a few places where profile replacement fails to update
and a stale profile is used for mediation. Fix this by moving to
accessing the current label through a critical section that will
always ensure mediation is using the current label regardless of
whether the tasks cred has been updated or not.
Signed-off-by: John Johansen <john.johansen@canonical.com>
cf797c0e Fri Jun 09 04:08:28 CDT 2017 John Johansen <john.johansen@canonical.com> apparmor: convert to profile block critical sections
There are still a few places where profile replacement fails to update
and a stale profile is used for mediation. Fix this by moving to
accessing the current label through a critical section that will
always ensure mediation is using the current label regardless of
whether the tasks cred has been updated or not.
Signed-off-by: John Johansen <john.johansen@canonical.com>
|
| H A D | policy_unpack.c | cf797c0e Fri Jun 09 04:08:28 CDT 2017 John Johansen <john.johansen@canonical.com> apparmor: convert to profile block critical sections
There are still a few places where profile replacement fails to update
and a stale profile is used for mediation. Fix this by moving to
accessing the current label through a critical section that will
always ensure mediation is using the current label regardless of
whether the tasks cred has been updated or not.
Signed-off-by: John Johansen <john.johansen@canonical.com>
cf797c0e Fri Jun 09 04:08:28 CDT 2017 John Johansen <john.johansen@canonical.com> apparmor: convert to profile block critical sections
There are still a few places where profile replacement fails to update
and a stale profile is used for mediation. Fix this by moving to
accessing the current label through a critical section that will
always ensure mediation is using the current label regardless of
whether the tasks cred has been updated or not.
Signed-off-by: John Johansen <john.johansen@canonical.com>
|
| H A D | apparmorfs.c | cf797c0e Fri Jun 09 04:08:28 CDT 2017 John Johansen <john.johansen@canonical.com> apparmor: convert to profile block critical sections
There are still a few places where profile replacement fails to update
and a stale profile is used for mediation. Fix this by moving to
accessing the current label through a critical section that will
always ensure mediation is using the current label regardless of
whether the tasks cred has been updated or not.
Signed-off-by: John Johansen <john.johansen@canonical.com>
cf797c0e Fri Jun 09 04:08:28 CDT 2017 John Johansen <john.johansen@canonical.com> apparmor: convert to profile block critical sections
There are still a few places where profile replacement fails to update
and a stale profile is used for mediation. Fix this by moving to
accessing the current label through a critical section that will
always ensure mediation is using the current label regardless of
whether the tasks cred has been updated or not.
Signed-off-by: John Johansen <john.johansen@canonical.com>
|
| H A D | lsm.c | cf797c0e Fri Jun 09 04:08:28 CDT 2017 John Johansen <john.johansen@canonical.com> apparmor: convert to profile block critical sections
There are still a few places where profile replacement fails to update
and a stale profile is used for mediation. Fix this by moving to
accessing the current label through a critical section that will
always ensure mediation is using the current label regardless of
whether the tasks cred has been updated or not.
Signed-off-by: John Johansen <john.johansen@canonical.com>
cf797c0e Fri Jun 09 04:08:28 CDT 2017 John Johansen <john.johansen@canonical.com> apparmor: convert to profile block critical sections
There are still a few places where profile replacement fails to update
and a stale profile is used for mediation. Fix this by moving to
accessing the current label through a critical section that will
always ensure mediation is using the current label regardless of
whether the tasks cred has been updated or not.
Signed-off-by: John Johansen <john.johansen@canonical.com>
|