mirror of
https://gitlab.com/apparmor/apparmor
synced 2025-09-01 14:55:10 +00:00
parser: Fixup flags merge for disconnected_path
When merging flags with a disconnected_path specified, there is no check for a conflict and we can just throw away (and leak) one of the paths. Signed-off-by: John Johansen <john.johansen@canonical.com>
This commit is contained in:
@@ -225,6 +225,17 @@ public:
|
|||||||
(PATH_CHROOT_NSATTACH | PATH_CHROOT_NO_ATTACH))
|
(PATH_CHROOT_NSATTACH | PATH_CHROOT_NO_ATTACH))
|
||||||
yyerror(_("Profile flag chroot_attach conflicts with chroot_no_attach"));
|
yyerror(_("Profile flag chroot_attach conflicts with chroot_no_attach"));
|
||||||
|
|
||||||
|
if (rhs.disconnected_path) {
|
||||||
|
if (disconnected_path) {
|
||||||
|
if (strcmp(disconnected_path, rhs.disconnected_path) != 0) {
|
||||||
|
yyerror(_("Profile flag attach_disconnected set to conflicting values: '%s' and '%s'"), disconnected_path, rhs.disconnected_path);
|
||||||
|
}
|
||||||
|
// same ignore rhs.disconnect_path
|
||||||
|
} else {
|
||||||
|
disconnected_path = rhs.disconnected_path;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
/* if we move to dupping disconnected_path will need to have
|
/* if we move to dupping disconnected_path will need to have
|
||||||
* an assignment and copy constructor and a destructor
|
* an assignment and copy constructor and a destructor
|
||||||
*/
|
*/
|
||||||
|
Reference in New Issue
Block a user