mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-31 14:25:52 +00:00
Code Issues Releases Wiki Activity

parser: enable extended perms if supported by the kernel

Browse Source 
Currently use of extended perms are dependent on prompt rules being present
in policy. Switch to using extended perms if they are supported.

Signed-off-by: John Johansen <john.johansen@canonical.com>
This commit is contained in:
John Johansen
2024-05-14 05:02:19 -07:00
parent 2737cb2c2b
commit ee1a5e6e18
3 changed files with 7 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
parser/parser_main.c
View File

@@ -1583,7 +1583,10 @@ static bool get_kernel_features(struct aa_features **features)
}
kernel_supports_permstable32_v1 = aa_features_supports(*features, "policy/permstable32_version/0x000001");
if (kernel_supports_permstable32_v1) {
//fprintf(stderr, "kernel supports prompt_v1\n");
/* permstabl32 is broken in kernels that only support v1
* so disable it
*/
kernel_supports_permstable32 = false;
}
/* set default prompt_compat_mode to the best that is supported */