diff options
| author |   Christian Brauner <christian.brauner@ubuntu.com> | 2021-01-21 14:19:44 +0100 |
|---|---|---|
| committer | Christian Brauner <christian.brauner@ubuntu.com> | 2021-01-24 14:27:20 +0100 |
| commit | 3cee6079f62f4d3a37d9dda2e0851677e08028ff (patch) | |
| tree | d06df042d5feaadad59ccd3c53f7611740db0f3e /security/integrity/ima/ima_policy.c | |
| parent | fs: make helpers idmap mount aware (diff) | |
| download | linux-dev-3cee6079f62f4d3a37d9dda2e0851677e08028ff.tar.xz linux-dev-3cee6079f62f4d3a37d9dda2e0851677e08028ff.zip | |
apparmor: handle idmapped mounts
The i_uid and i_gid are mostly used when logging for AppArmor. This is
broken in a bunch of places where the global root id is reported instead
of the i_uid or i_gid of the file. Nonetheless, be kind and log the
mapped inode if we're coming from an idmapped mount. If the initial user
namespace is passed nothing changes so non-idmapped mounts will see
identical behavior as before.
Link: https://lore.kernel.org/r/20210121131959.646623-26-christian.brauner@ubuntu.com
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
Diffstat (limited to 'security/integrity/ima/ima_policy.c')
0 files changed, 0 insertions, 0 deletions