xiaomi-sm8450/android_kernel_xiaomi_sm8450
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

AppArmor: Fix security_task_setrlimit logic for 2.6.36 changes

Browse Source 
2.6.36 introduced the abilitiy to specify the task that is having its
rlimits set.  Update mediation to ensure that confined tasks can only
set their own group_leader as expected by current policy.

Add TODO note about extending policy to support setting other tasks
rlimits.

Signed-off-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: James Morris <jmorris@namei.org>
This commit is contained in:
John Johansen
2010-09-06 10:10:20 -07:00
committed by James Morris
parent e819ff519b
commit 3a2dc8382a
3 changed files with 15 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
security/apparmor/lsm.c
View File

@@ -614,7 +614,7 @@ static int apparmor_task_setrlimit(struct task_struct *task,
int error = 0;
if (!unconfined(profile))
error = aa_task_setrlimit(profile, resource, new_rlim);
error = aa_task_setrlimit(profile, task, resource, new_rlim);
return error;
}