mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-30 22:05:27 +00:00
Code Issues Releases Wiki Activity
Files
9980ae76d815beb7ba87f5d55f8aeaef2d6a21b6
apparmor/parser
History
John Johansen 9980ae76d8 Merge Fix use-after-free of 'name' in parser_regex.c 
'name' gets used in the error message. Make sure it only gets freed
afterwards.

This bug was introduced in be0d2fa947 /
https://gitlab.com/apparmor/apparmor/-/merge_requests/727

Fixes coverity CID 254465:  Memory - illegal accesses  (USE_AFTER_FREE)

I propose this fix for 3.0..master.

MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/1040
Approved-by: Georgia Garcia <georgia.garcia@canonical.com>
Merged-by: John Johansen <john@jjmx.net>
(cherry picked from commit 8d6358fa6d)
Signed-off-by: John Johansen <john.johansen@canonical.com>
2023-05-29 15:38:58 -07:00
..
libapparmor_re
Merge parser: Fix invalid reference to transitions when building the chfa
2022-12-09 23:03:54 -08:00
po
translations: update generated pot files
2020-10-14 03:56:38 -07:00
tst
Merge extend test profiles for mount
2023-05-23 14:41:58 -07:00
aa-teardown
aa-teardown: Replace /bin/bash with /bin/sh
2018-05-05 17:46:19 -07:00
aa-teardown.pod
docs: update documentation to point bug reporting to gitlab
2020-05-05 00:10:53 -07:00
af_rule.cc
treewide: spelling/typo fixes in comments and docs
2020-12-01 12:47:11 -08:00
af_rule.h
C tools: rename __unused macro to unused
2014-10-02 12:58:54 -07:00
af_unix.cc
Merge Fix mode not being printed when debugging AF_UNIX socket rules.
2023-02-01 19:50:55 -08:00
af_unix.h
Merge Fix mode not being printed when debugging AF_UNIX socket rules.
2023-02-01 19:50:55 -08:00
apparmor_parser.pod
parser: fix --jobs so job scaling is applied correctly
2021-02-10 19:06:26 -08:00
apparmor_xattrs.pod
apparmor_xattrs.7: fix whatis entry
2020-10-25 11:54:47 +00:00
apparmor.d.pod
Merge Issue 312: added missing kernel mount options
2023-05-03 17:00:15 +02:00
apparmor.pod
man: apparmor.7 add info about complain mode and kernel parameters
2021-03-15 15:24:43 -07:00
apparmor.service
Adjust cache paths in apparmor.service
2018-06-16 23:14:19 +02:00
apparmor.systemd
Make the systemd unit a no-op in containers with no internal policy
2022-02-12 10:23:39 +00:00
base_af_names.h
Add 'mctp' network domain keyword
2022-02-08 19:09:24 +01:00
base_cap_names.h
parser: Add support for CAP_CHECKPOINT_RESTORE
2020-10-13 21:30:19 -07:00
capability.h
parser/capability.h: add missing <cstdint> include
2022-05-23 23:13:14 +01:00
common_optarg.c
parser: cleanup/fix flagtable display for the warn, dump, and Optimize options
2020-09-01 19:42:38 -07:00
common_optarg.h
parser: add the ability to print what flags are set in option flag tables
2020-09-01 19:42:38 -07:00
COPYING.GPL
rpmlint complains about an outdated FSF address in parser/COPYING.GPL.
2011-11-27 13:52:06 +01:00
dbus.cc
parser: call filter slashes for the dbus path conditional
2020-09-29 04:14:35 -07:00
dbus.h
parser: replace duplicate warn_once() with common function
2020-08-09 17:56:31 -04:00
default_features.c
parser: Move to a pre-generated cap_names.h
2020-07-07 09:43:48 -07:00
file_cache.h
Fix comment wording in file_cache.h
2021-05-02 11:29:41 +02:00
frob_slack_rc
…
immunix.h
parser: convert commented out fprintf() in immunix.h to PDEBUG()
2020-09-05 09:38:53 -04:00
lib.c
Fix comment typo in parser/lib.c
2021-12-05 18:16:53 +01:00
lib.h
libapparmor: Use directory file descriptor in _aa_dirat_for_each()
2015-06-15 15:11:51 -05:00
Makefile
Merge parser: fix DISTRO variable in Makefile
2022-10-07 19:54:08 +00:00
mount.cc
Merge Issue 312: added missing kernel mount options
2023-05-03 17:00:15 +02:00
mount.h
Merge Issue 312: added missing kernel mount options
2023-05-03 17:00:15 +02:00
network.c
Use the gcc cleanup extension attribute to handle closing temp files
2015-03-25 17:09:26 -05:00
network.h
parser: add support for kernel 4.17 v8 networking
2020-09-29 03:33:55 -07:00
parser_alias.c
parser: provide typedefs for comparison_fn_t and __free_fn_t
2018-05-09 13:15:42 -07:00
parser_common.c
parser: add include dedup cache to handle include loops
2021-04-27 20:26:57 -07:00
parser_include.c
Merge parser: fix definitely and possibly lost memory leaks
2023-03-28 20:21:09 -07:00
parser_include.h
parser: add include dedup cache to handle include loops
2021-04-27 20:26:57 -07:00
parser_interface.c
treewide: spelling/typo fixes in comments and docs
2020-12-01 12:47:11 -08:00
parser_lex.l
Merge Fix order of if conditions to avoid unreachable code
2023-05-29 15:30:26 -07:00
parser_main.c
Merge parser: fix definitely and possibly lost memory leaks
2023-03-28 20:21:09 -07:00
parser_merge.c
parser: Stop splitting the namespace from the named transition targets
2016-03-18 17:28:51 -05:00
parser_misc.c
parser: don't abort profile compile if the kernel is missing caps/mask
2020-12-11 04:01:40 -08:00
parser_policy.c
[6/7] parser: update the parser to add interface rules for change_X
2021-07-21 14:31:44 -07:00
parser_regex.c
Merge Fix use-after-free of 'name' in parser_regex.c
2023-05-29 15:38:58 -07:00
parser_symtab.c
treewide: spelling/typo fixes in code strings
2020-12-01 12:47:18 -08:00
parser_variable.c
parser: fix memory leaks in unit tests
2016-01-25 12:05:50 -08:00
parser_yacc.y
Merge parser: fix definitely and possibly lost memory leaks
2023-03-28 20:21:09 -07:00
parser.conf
treewide: spelling/typo fixes in comments and docs
2020-12-01 12:47:11 -08:00
parser.h
Merge Fix mount rules encoding
2023-03-29 10:41:47 -07:00
policy_cache.c
Fix wording of some warnings
2020-10-11 12:22:23 +02:00
policy_cache.h
drop unused extern int debug_cache
2021-02-07 16:02:20 +01:00
policydb.h
parser: add support for kernel 4.17 v8 networking
2020-09-29 03:33:55 -07:00
profile-load
profile-load: use less ambiguous if/then construct
2022-02-15 07:34:17 +00:00
profile.cc
parser: support enforce, kill and unconfined profile modes
2020-06-10 05:35:37 -07:00
profile.h
parser: Use the kernel and policy abis to detect new capabilities
2020-07-07 09:43:48 -07:00
ptrace.cc
parser: replace duplicate warn_once() with common function
2020-08-09 17:56:31 -04:00
ptrace.h
parser: replace duplicate warn_once() with common function
2020-08-09 17:56:31 -04:00
rc.apparmor.functions
rc.apparmor.functions: only use systemd-detect-virt if it's present
2022-07-06 06:41:35 +00:00
rc.apparmor.slackware
added missing functions to slackware init script
2019-11-08 13:49:48 +01:00
README
README: Move project contact info into the main README
2018-09-13 16:54:09 +00:00
README.devel
parser: add some developer documentation
2013-12-10 14:15:02 -08:00
rule.cc
parser: replace duplicate warn_once() with common function
2020-08-09 17:56:31 -04:00
rule.h
parser: replace duplicate warn_once() with common function
2020-08-09 17:56:31 -04:00
signal.cc
treewide: spelling/typo fixes in comments and docs
2020-12-01 12:47:11 -08:00
signal.h
parser: replace duplicate warn_once() with common function
2020-08-09 17:56:31 -04:00
techdoc.tex
treewide: spelling/typo fixes in comments and docs
2020-12-01 12:47:11 -08:00
unit_test.h
Convert codomain to a class
2013-09-27 16:16:37 -07:00

README 

The apparmor_parser allows you to add, replace, and remove AppArmor
policy through the use of command line options. The default is to add.
`apparmor_parser --help` shows what the command line options are.

You can also find more information at https://wiki.apparmor.net

-- The AppArmor development team