mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-09-02 15:25:27 +00:00
Code Issues Releases Wiki Activity

handle_children: Fix denying of adding a hat

Browse Source 
Choosing "Deny" when handle_children() asks about adding a hat should
not add that hat, but it should _not_ leave the function because that
means all the other log events that were not migrated to prelog yet will
be lost.

Change "return" to "continue" to fix this.
This commit is contained in:
Christian Boltz
2019-05-02 22:42:03 +02:00
parent 21c3d57f8d
commit 87f91864be
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
utils/apparmor/aa.py
View File

@@ -992,7 +992,7 @@ def handle_children(profile, hat, root):
hat = default_hat
elif ans == 'CMD_DENY':
# As unknown hat is denied no entry for it should be made
return None
continue
elif typ == 'capability':
# If capability then we (should) have pid, profile, hat, program, mode, capability