diff options
| author | John Johansen <john.johansen@canonical.com> | 2018-04-11 11:03:26 +0200 |
|---|---|---|
| committer | John Johansen <john.johansen@canonical.com> | 2018-06-07 10:51:01 +0200 |
| commit | 11c92f144bf39f448f65202cccba672097a1100b (patch) | |
| tree | 1a436194bef21b5333ca330ff4a6100561d0c710 /drivers | |
| parent | apparmor: fixup secid map conversion to using IDR (diff) | |
| download | linux-11c92f144bf39f448f65202cccba672097a1100b.tar.xz linux-11c92f144bf39f448f65202cccba672097a1100b.zip | |
apparmor: fix mediation of prlimit
For primit apparmor requires that if target confinement does not match
the setting task's confinement, the setting task requires CAP_SYS_RESOURCE.
Unfortunately this was broken when rlimit enforcement was reworked to
support labels.
Fixes: 86b92cb782b3 ("apparmor: move resource checks to using labels")
Signed-off-by: John Johansen <john.johansen@canonical.com>
Diffstat (limited to 'drivers')
0 files changed, 0 insertions, 0 deletions