apparmor: add a default null dfa

Browse Source

Instead of testing whether a given dfa exists in every code path, have
a default null dfa that is used when loaded policy doesn't provide a
dfa.

This will let us get rid of special casing and avoid dereference bugs
when special casing is missed.

Signed-off-by: John Johansen <john.johansen@canonical.com>

...

This commit is contained in:

John Johansen

2017-01-16 00:42:42 -08:00

parent 6604d4c1c1

commit 11c236b89d

6 changed files with 46 additions and 2 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

1

security/apparmor/nulldfa.in Normal file

File diff suppressed because one or more lines are too long