diff options
author | John Johansen <john.johansen@canonical.com> | 2017-01-16 00:42:25 -0800 |
---|---|---|
committer | John Johansen <john.johansen@canonical.com> | 2017-01-16 01:18:22 -0800 |
commit | 92b6d8eff55f8dca57ade26e1dde2c3b6acdae02 (patch) | |
tree | fbfa2973ecd4185de867f62e37878077a0738904 /security/apparmor/procattr.c | |
parent | 31617ddfdd7764a5046f076247208aa324458069 (diff) | |
download | op-kernel-dev-92b6d8eff55f8dca57ade26e1dde2c3b6acdae02.zip op-kernel-dev-92b6d8eff55f8dca57ade26e1dde2c3b6acdae02.tar.gz |
apparmor: allow ns visibility question to consider subnses
Signed-off-by: John Johansen <john.johansen@canonical.com>
Diffstat (limited to 'security/apparmor/procattr.c')
-rw-r--r-- | security/apparmor/procattr.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/security/apparmor/procattr.c b/security/apparmor/procattr.c index 15ddf74..1babd36 100644 --- a/security/apparmor/procattr.c +++ b/security/apparmor/procattr.c @@ -44,10 +44,10 @@ int aa_getprocattr(struct aa_profile *profile, char **string) struct aa_ns *current_ns = __aa_current_profile()->ns; char *s; - if (!aa_ns_visible(current_ns, ns)) + if (!aa_ns_visible(current_ns, ns, true)) return -EACCES; - ns_name = aa_ns_name(current_ns, ns); + ns_name = aa_ns_name(current_ns, ns, true); ns_len = strlen(ns_name); /* if the visible ns_name is > 0 increase size for : :// seperator */ |