diff options
| author |   John Johansen <john.johansen@canonical.com> | 2017-01-16 00:42:25 -0800 |
|---|---|---|
| committer | John Johansen <john.johansen@canonical.com> | 2017-01-16 01:18:22 -0800 |
| commit | 92b6d8eff55f8dca57ade26e1dde2c3b6acdae02 (patch) | |
| tree | fbfa2973ecd4185de867f62e37878077a0738904 /security/apparmor/procattr.c | |
| parent | apparmor: add fn to lookup profiles by fqname (diff) | |
| download | linux-dev-92b6d8eff55f8dca57ade26e1dde2c3b6acdae02.tar.xz linux-dev-92b6d8eff55f8dca57ade26e1dde2c3b6acdae02.zip | |
apparmor: allow ns visibility question to consider subnses
Signed-off-by: John Johansen <john.johansen@canonical.com>
Diffstat (limited to '')
| -rw-r--r-- | security/apparmor/procattr.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/security/apparmor/procattr.c b/security/apparmor/procattr.c index 15ddf74ac269..1babd3655520 100644 --- a/security/apparmor/procattr.c +++ b/security/apparmor/procattr.c @@ -44,10 +44,10 @@ int aa_getprocattr(struct aa_profile *profile, char **string) struct aa_ns *current_ns = __aa_current_profile()->ns; char *s; - if (!aa_ns_visible(current_ns, ns)) + if (!aa_ns_visible(current_ns, ns, true)) return -EACCES; - ns_name = aa_ns_name(current_ns, ns); + ns_name = aa_ns_name(current_ns, ns, true); ns_len = strlen(ns_name); /* if the visible ns_name is > 0 increase size for : :// seperator */ |