linux-kernel - [GIT PULL] apparmor fix for 4.15-rc8

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <ed54ac5f-daaf-8b5a-2051-3776b392dcef@canonical.com>
Date:   Fri, 12 Jan 2018 18:29:45 -0800
From:   John Johansen <john.johansen@...onical.com>
To:     Linus Torvalds <torvalds@...ux-foundation.org>
Cc:     LKLM <linux-kernel@...r.kernel.org>
Subject: [GIT PULL] apparmor fix for 4.15-rc8

Linus,

can you please pull the following regression fixes for apparmor.

It fixes a couple bugs I have been working with Matthew Garrett on
this week. Specifically a regression in the handling of a conflicting
profile attachment and label match restrictions for ptrace when
profiles are stacked.

thanks
-- John


The following changes since commit c92a9a461dff6140c539c61e457aa97df29517d6:

  Merge branch 'x86-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip (2018-01-12 10:32:11 -0800)

are available in the git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor tags/apparmor-pr-2018-01-12

for you to fetch changes up to 1a3881d305592d947ed47887306919d50112394d:

  apparmor: Fix regression in profile conflict logic (2018-01-12 15:56:50 -0800)

----------------------------------------------------------------
- apparmor: fix ptrace label match when matching stacked labels
- apparmor: Fix regression in profile conflict logic

----------------------------------------------------------------
John Johansen (1):
      apparmor: fix ptrace label match when matching stacked labels

Matthew Garrett (1):
      apparmor: Fix regression in profile conflict logic

 security/apparmor/domain.c        |  9 ++++---
 security/apparmor/include/perms.h |  3 +++
 security/apparmor/ipc.c           | 53 +++++++++++++++++++++++----------------
 3 files changed, 40 insertions(+), 25 deletions(-)



Download attachment "signature.asc" of type "application/pgp-signature" (802 bytes)