John Johansen 54b990ede4 apparmor: fix resource audit messages when auditing peer ...

commit b5beb07ad32ab533027aa988d96a44965ec116f7 upstream.

Resource auditing is using the peer field which is not available
when the rlim data struct is used, because it is a different element
of the same union. Accessing peer during resource auditing could
cause garbage log entries or even oops the kernel.

Move the rlim data block into the same struct as the peer field
so they can be used together.

CC: <stable@vger.kernel.org>
Fixes: 86b92cb782b3 ("apparmor: move resource checks to using labels")
Signed-off-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2018-04-19 08:56:18 +02:00

..

include

apparmor: fix resource audit messages when auditing peer

2018-04-19 08:56:18 +02:00

.gitignore

Revert "apparmor: add base infastructure for socket mediation"

2017-10-26 19:35:35 +02:00

apparmorfs.c

apparmor: fix display of .ns_name for containers

2018-04-19 08:56:18 +02:00

audit.c

apparmor: switch from profiles to using labels on contexts

2017-06-10 17:11:38 -07:00

capability.c

apparmor: move capability checks to using labels

2017-06-10 17:11:40 -07:00

context.c

apparmor: switch from profiles to using labels on contexts

2017-06-10 17:11:38 -07:00

crypto.c

apparmor: use SHASH_DESC_ON_STACK

2017-04-07 08:58:35 +10:00

domain.c

+ Features

2017-09-23 05:33:29 -10:00

file.c

Revert "apparmor: add base infastructure for socket mediation"

2017-10-26 19:35:35 +02:00

ipc.c

apparmor: fix logging of the existence test for signals

2018-04-19 08:56:18 +02:00

Kconfig

apparmor: add debug assert AA_BUG and Kconfig to control debug info

2017-01-16 01:18:24 -08:00

label.c

apparmor: fix incorrect type assignment when freeing proxies

2017-09-22 13:00:58 -07:00

lib.c

Revert "apparmor: add base infastructure for socket mediation"

2017-10-26 19:35:35 +02:00

lsm.c

Revert "apparmor: add base infastructure for socket mediation"

2017-10-26 19:35:35 +02:00

Makefile

License cleanup: add SPDX license identifiers to some files

2017-11-02 10:04:46 -07:00

match.c

doc: ReSTify apparmor.txt

2017-05-18 10:32:38 -06:00

mount.c

apparmor: fix regression in mount mediation when feature set is pinned

2018-01-10 09:31:22 +01:00

nulldfa.in

apparmor: add a default null dfa

2017-01-16 01:18:34 -08:00

path.c

apparmor: Move path lookup to using preallocated buffers

2017-06-08 11:29:34 -07:00

policy_ns.c

apparmor: ensure unconfined profiles have dfas initialized

2017-09-22 13:00:58 -07:00

policy_unpack.c

Revert "apparmor: add base infastructure for socket mediation"

2017-10-26 19:35:35 +02:00

policy.c

apparmor: fix leak of null profile name if profile allocation fails

2017-12-14 09:53:06 +01:00

procattr.c

apparmor: switch getprocattr to using label_print fns()

2017-06-10 17:11:39 -07:00

resource.c

apparmor: move resource checks to using labels

2017-06-10 17:11:40 -07:00

secid.c

apparmor: rename sid to secid

2017-01-16 00:42:17 -08:00