linux-yocto/security/apparmor
Ryan Lee 4c3f731b25 apparmor: allocate xmatch for nullpdb inside aa_alloc_null
commit 17d0d04f3c upstream.

attach->xmatch was not set when allocating a null profile, which is used in
complain mode to allocate a learning profile. This was causing downstream
failures in find_attach, which expected a valid xmatch but did not find
one under a certain sequence of profile transitions in complain mode.

This patch ensures the xmatch is set up properly for null profiles.

Signed-off-by: Ryan Lee <ryan.lee@canonical.com>
Signed-off-by: John Johansen <john.johansen@canonical.com>
Cc: Paul Kramme <kramme@digitalmanufaktur.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2025-01-23 17:23:05 +01:00
..
include lsm: infrastructure management of the sock security 2024-07-29 16:54:50 -04:00
.gitignore
apparmorfs.c apparmor: fix possible NULL pointer dereference 2024-05-10 08:59:05 -07:00
audit.c ima: Avoid blocking in RCU read-side critical section 2024-06-13 14:26:50 -04:00
capability.c apparmor: fix 'Do simple duplicate message elimination' 2024-12-05 14:02:39 +01:00
crypto.c
domain.c
file.c apparmor: remove useless static inline function is_deleted 2024-05-10 08:44:43 -07:00
ipc.c
Kconfig
label.c
lib.c
lsm.c lsm: infrastructure management of the sock security 2024-07-29 16:54:50 -04:00
Makefile
match.c
mount.c apparmor: take nosymfollow flag into account 2024-07-24 10:33:58 -07:00
net.c lsm: infrastructure management of the sock security 2024-07-29 16:54:50 -04:00
nulldfa.in
path.c
policy_compat.c
policy_ns.c
policy_unpack_test.c apparmor: test: Fix memory leak for aa_unpack_strdup() 2024-12-05 14:02:46 +01:00
policy_unpack.c move asm/unaligned.h to linux/unaligned.h 2024-10-02 17:23:23 -04:00
policy.c apparmor: allocate xmatch for nullpdb inside aa_alloc_null 2025-01-23 17:23:05 +01:00
procattr.c
resource.c
secid.c
stacksplitdfa.in
task.c