diff options
| author | John Johansen <john.johansen@canonical.com> | 2014-07-25 13:02:03 +0200 |
|---|---|---|
| committer | John Johansen <john.johansen@canonical.com> | 2016-07-12 17:43:10 +0200 |
| commit | 9049a7922124d843a2cd26a02b1d00a17596ec0c (patch) | |
| tree | 34ca85c85a78a21003149619dc3c5074bf8afc33 | |
| parent | apparmor: fix uninitialized lsm_audit member (diff) | |
| download | linux-9049a7922124d843a2cd26a02b1d00a17596ec0c.tar.xz linux-9049a7922124d843a2cd26a02b1d00a17596ec0c.zip | |
apparmor: exec should not be returning ENOENT when it denies
The current behavior is confusing as it causes exec failures to report
the executable is missing instead of identifying that apparmor
caused the failure.
Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Seth Arnold <seth.arnold@canonical.com>
| -rw-r--r-- | security/apparmor/domain.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/security/apparmor/domain.c b/security/apparmor/domain.c index dc0027b28b04..67a7418937a5 100644 --- a/security/apparmor/domain.c +++ b/security/apparmor/domain.c @@ -433,7 +433,7 @@ int apparmor_bprm_set_creds(struct linux_binprm *bprm) new_profile = aa_get_newest_profile(ns->unconfined); info = "ux fallback"; } else { - error = -ENOENT; + error = -EACCES; info = "profile not found"; /* remove MAY_EXEC to audit as failure */ perms.allow &= ~MAY_EXEC; |