** Tags added: aa-kernel

You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.

  apparmor module parameters can be changed after the policy is locked

Status in AppArmor:
Status in linux package in Ubuntu:
  Fix Released
Status in linux source package in Xenial:
  Fix Released
Status in linux source package in Yakkety:
  Fix Released

Bug description:
  the policy_lock parameter is a one way switch that prevents policy            
  from being further modified. Unfortunately some of the module parameters      
  can effectively modify policy by turning off enforcement.                     
  split policy_admin_capable into a view check and a full admin check,          
  and update the admin check to test the policy_lock parameter.

To manage notifications about this bug go to:

Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to