diff options
author | 2016-06-22 18:01:08 -0700 | |
---|---|---|
committer | 2016-07-12 08:43:10 -0700 | |
commit | 58acf9d911c8831156634a44d0b022d683e1e50c (patch) | |
tree | df76653f50579f989c36eab7139919523f50d561 /security/apparmor/include/policy.h | |
parent | apparmor: fix oops in profile_unpack() when policy_db is not present (diff) | |
download | linux-58acf9d911c8831156634a44d0b022d683e1e50c.tar.gz linux-58acf9d911c8831156634a44d0b022d683e1e50c.tar.bz2 linux-58acf9d911c8831156634a44d0b022d683e1e50c.zip |
apparmor: fix module parameters can be changed after policy is locked
the policy_lock parameter is a one way switch that prevents policy
from being further modified. Unfortunately some of the module parameters
can effectively modify policy by turning off enforcement.
split policy_admin_capable into a view check and a full admin check,
and update the admin check to test the policy_lock parameter.
Signed-off-by: John Johansen <john.johansen@canonical.com>
Diffstat (limited to 'security/apparmor/include/policy.h')
-rw-r--r-- | security/apparmor/include/policy.h | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/security/apparmor/include/policy.h b/security/apparmor/include/policy.h index c28b0f20ab53..52275f040a5f 100644 --- a/security/apparmor/include/policy.h +++ b/security/apparmor/include/policy.h @@ -403,6 +403,8 @@ static inline int AUDIT_MODE(struct aa_profile *profile) return profile->audit; } +bool policy_view_capable(void); +bool policy_admin_capable(void); bool aa_may_manage_policy(int op); #endif /* __AA_POLICY_H */ |