diff options
| author | John Johansen <john.johansen@canonical.com> | 2010-09-06 10:10:20 -0700 |
|---|---|---|
| committer | James Morris <jmorris@namei.org> | 2010-09-08 09:19:29 +1000 |
| commit | 3a2dc8382a3e85a51ed9c6f57ea80665ea7a0c95 (patch) | |
| tree | 05b289dc97bf08459911d0b5500896ed80af25c7 /security/apparmor/lsm.c | |
| parent | e819ff519b2d74373eca4a9a2b417ebf4c1e1b29 (diff) | |
| download | op-kernel-dev-3a2dc8382a3e85a51ed9c6f57ea80665ea7a0c95.zip op-kernel-dev-3a2dc8382a3e85a51ed9c6f57ea80665ea7a0c95.tar.gz | |
AppArmor: Fix security_task_setrlimit logic for 2.6.36 changes
2.6.36 introduced the abilitiy to specify the task that is having its
rlimits set. Update mediation to ensure that confined tasks can only
set their own group_leader as expected by current policy.
Add TODO note about extending policy to support setting other tasks
rlimits.
Signed-off-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: James Morris <jmorris@namei.org>
Diffstat (limited to 'security/apparmor/lsm.c')
| -rw-r--r-- | security/apparmor/lsm.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/security/apparmor/lsm.c b/security/apparmor/lsm.c index f73e2c2..cf1de44 100644 --- a/security/apparmor/lsm.c +++ b/security/apparmor/lsm.c @@ -614,7 +614,7 @@ static int apparmor_task_setrlimit(struct task_struct *task, int error = 0; if (!unconfined(profile)) - error = aa_task_setrlimit(profile, resource, new_rlim); + error = aa_task_setrlimit(profile, task, resource, new_rlim); return error; } |
