diff options
| author | John Johansen <john.johansen@canonical.com> | 2017-06-09 23:07:02 +0200 |
|---|---|---|
| committer | John Johansen <john.johansen@canonical.com> | 2017-06-11 02:11:40 +0200 |
| commit | c70c86c421427fd8487867de66c4104b15abd772 (patch) | |
| tree | 0d742b0b9d2f2972b1f93aea3caf1a6c87b3b91b /security/apparmor/ipc.c | |
| parent | apparmor: update query interface to support label queries (diff) | |
| download | linux-c70c86c421427fd8487867de66c4104b15abd772.tar.xz linux-c70c86c421427fd8487867de66c4104b15abd772.zip | |
apparmor: move capability checks to using labels
Signed-off-by: John Johansen <john.johansen@canonical.com>
Diffstat (limited to 'security/apparmor/ipc.c')
| -rw-r--r-- | security/apparmor/ipc.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/security/apparmor/ipc.c b/security/apparmor/ipc.c index fa68cd42bd15..7678d94c4002 100644 --- a/security/apparmor/ipc.c +++ b/security/apparmor/ipc.c @@ -68,7 +68,7 @@ int aa_may_ptrace(struct aa_profile *tracer, struct aa_profile *tracee, if (profile_unconfined(tracer) || tracer == tracee) return 0; /* log this capability request */ - return aa_capable(tracer, CAP_SYS_PTRACE, 1); + return aa_capable(&tracer->label, CAP_SYS_PTRACE, 1); } /** |