On Wed, Mar 18, 2015 at 10:32:16AM -0500, Tyler Hicks wrote:
> On 2015-03-17 16:13:03, Steve Beattie wrote:
> > On Tue, Mar 17, 2015 at 12:14:07AM -0700, John Johansen wrote:
> > > This fixes the incorrect compilation of audit modifiers for exec and
> > > pivot_root as detailed in
> > > 
> > > https://launchpad.net/bugs/1431717
> > > https://launchpad.net/bugs/1432045
> > > 
> > > The permission accumulation routine on the backend was incorrectly setting
> > > the audit mask based off of the exec type bits (info about the exec) and
> > > not the actual exec permission.
> > > 
> > > This bug could have also caused permissions issues around overlapping exec
> > > generic and exact match exec rules, except the encoding of EXEC_MODIFIERS
> > > ensured that the 
> > >   exact_match_allow & AA_USER/OTHER_EXEC_TYPE
> > > test would never fail for a permission accumulation with the exec 
> > > permission
> > > set.
> > > 
> > > Signed-off-by: John Johansen <[email protected]>
> > 
> > Acked-by: Steve Beattie <[email protected]> for trunk and 2.9. Thanks!
> 
> It gets my ack, too.
> 
> Do I have the green light to commit the tests to 2.9, as well?

Yes, please do. Thanks!

-- 
Steve Beattie
<[email protected]>
http://NxNW.org/~steve/

Attachment: signature.asc
Description: Digital signature

-- 
AppArmor mailing list
[email protected]
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/apparmor

Reply via email to