linux/security/apparmor
John Johansen a20aa95fbe apparmor: fail task profile update if current_cred isn't real_cred
Trying to update the task cred while the task current cred is not the
real cred will result in an error at the cred layer. Avoid this by
failing early and delaying the update.

Signed-off-by: John Johansen <john.johansen@canonical.com>
2017-01-16 01:18:45 -08:00
..
include apparmor: add per policy ns .load, .replace, .remove interface files 2017-01-16 01:18:44 -08:00
.gitignore AppArmor: remove af_names.h from .gitignore 2012-09-01 08:35:34 -07:00
apparmorfs.c apparmor: add per policy ns .load, .replace, .remove interface files 2017-01-16 01:18:44 -08:00
audit.c apparmor: split apparmor policy namespaces code into its own file 2017-01-16 00:42:15 -08:00
capability.c apparmor: fix capability to not use the current task, during reporting 2013-10-29 21:33:37 -07:00
context.c apparmor: fail task profile update if current_cred isn't real_cred 2017-01-16 01:18:45 -08:00
crypto.c apparmor: allow introspecting the loaded policy pre internal transform 2017-01-16 01:18:42 -08:00
domain.c apparmor: name null-XXX profiles after the executable 2017-01-16 01:18:30 -08:00
file.c apparmor: use designated initializers 2017-01-15 20:00:32 -08:00
ipc.c apparmor: fix capability to not use the current task, during reporting 2013-10-29 21:33:37 -07:00
Kconfig apparmor: add debug assert AA_BUG and Kconfig to control debug info 2017-01-16 01:18:24 -08:00
lib.c apparmor: update policy_destroy to use new debug asserts 2017-01-16 01:18:27 -08:00
lsm.c apparmor: add ns being viewed as a param to policy_admin_capable() 2017-01-16 01:18:40 -08:00
Makefile apparmor: rename sid to secid 2017-01-16 00:42:17 -08:00
match.c apparmor: add a default null dfa 2017-01-16 01:18:34 -08:00
nulldfa.in apparmor: add a default null dfa 2017-01-16 01:18:34 -08:00
path.c apparmor: internal paths should be treated as disconnected 2016-07-12 08:43:10 -07:00
policy_ns.c apparmor: track ns level so it can be used to help in view checks 2017-01-16 01:18:36 -08:00
policy_unpack.c apparmor: audit policy ns specified in policy load 2017-01-16 01:18:43 -08:00
policy.c apparmor: pass the subject profile into profile replace/remove 2017-01-16 01:18:43 -08:00
procattr.c apparmor: allow ns visibility question to consider subnses 2017-01-16 01:18:22 -08:00
resource.c apparmor: allow SYS_CAP_RESOURCE to be sufficient to prlimit another task 2016-07-12 08:43:10 -07:00
secid.c apparmor: rename sid to secid 2017-01-16 00:42:17 -08:00