mirror of
https://gitlab.com/apparmor/apparmor
synced 2025-08-29 05:17:59 +00:00
d22a867723
This fixes the incorrect compilation of audit modifiers for exec and pivot_root as detailed in https://launchpad.net/bugs/1431717 https://launchpad.net/bugs/1432045 The permission accumulation routine on the backend was incorrectly setting the audit mask based off of the exec type bits (info about the exec) and not the actual exec permission. This bug could have also caused permissions issues around overlapping exec generic and exact match exec rules, except the encoding of EXEC_MODIFIERS ensured that the exact_match_allow & AA_USER/OTHER_EXEC_TYPE test would never fail for a permission accumulation with the exec permission set. Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Steve Beattie <steve@nxnw.org>
The apparmor_parser allows you to add, replace, and remove AppArmor policy through the use of command line options. The default is to add. `apparmor_parser --help` shows what the command line options are. You can also find more information at http://wiki.apparmor.net Please send all complaints, feature requests, rants about the software, and questions to the apparmor@lists.ubuntu.com mailing list. Bug reports can be filed against the AppArmor project on launchpad.net at https://launchpad.net/apparmor or reported to the mailing list directly for those who wish not to register for an account on launchpad. Security issues can be filed as security bugs on launchpad or directed to security@ubuntu.com. We will attempt to conform to the RFP vulnerability disclosure protocol: http://www.wiretrip.net/rfp/policy.html Thanks. -- The AppArmor development team