diff options
| author | John Johansen <john.johansen@canonical.com> | 2016-06-22 18:01:08 -0700 |
|---|---|---|
| committer | John Johansen <john.johansen@canonical.com> | 2016-07-12 08:43:10 -0700 |
| commit | 58acf9d911c8831156634a44d0b022d683e1e50c (patch) | |
| tree | df76653f50579f989c36eab7139919523f50d561 /lib/locking-selftest-rlock.h | |
| parent | 5f20fdfed16bc599a325a145bf0123a8e1c9beea (diff) | |
| download | linux-58acf9d911c8831156634a44d0b022d683e1e50c.tar.bz2 | |
apparmor: fix module parameters can be changed after policy is locked
the policy_lock parameter is a one way switch that prevents policy
from being further modified. Unfortunately some of the module parameters
can effectively modify policy by turning off enforcement.
split policy_admin_capable into a view check and a full admin check,
and update the admin check to test the policy_lock parameter.
Signed-off-by: John Johansen <john.johansen@canonical.com>
Diffstat (limited to 'lib/locking-selftest-rlock.h')
0 files changed, 0 insertions, 0 deletions