Zygmunt Krynicki 340372688b apparmor: put secmark label after secid lookup ...

apparmor_secmark_init() parses a configured secmark label to obtain its
secid.  aa_label_strn_parse() returns a refcounted label, but the success
path kept that reference after copying the secid.

Fixes: ab9f211508 ("apparmor: Allow filtering based on secmark policy")
Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Signed-off-by: John Johansen <john.johansen@canonical.com>

2026-06-13 20:18:30 -07:00

..

include

apparmor: remove or add symlinks to rawdata according to export_binary

2026-06-13 20:14:07 -07:00

.gitignore

…

.kunitconfig

apparmor: add .kunitconfig

2026-02-01 12:01:19 -08:00

af_unix.c

apparmor: fix refcount leak when updating the sk_ctx

2026-06-13 20:14:06 -07:00

apparmorfs.c

apparmor: Fix return in ns_mkdir_op

2026-06-13 20:14:07 -07:00

audit.c

treewide: Replace kmalloc with kmalloc_obj for non-scalar types

2026-02-21 01:02:28 -08:00

capability.c

apparmor: transition from a list of rules to a vector of rules

2025-07-20 02:31:06 -07:00

crypto.c

apparmor: move initcalls to the LSM framework

2025-10-22 19:24:27 -04:00

domain.c

apparmor: change fn_label_build() call to not return NULL

2026-06-13 20:14:07 -07:00

file.c

apparmor: fix fast path cache check for unix sockets

2026-01-29 01:27:54 -08:00

ipc.c

apparmor: transition from a list of rules to a vector of rules

2025-07-20 02:31:06 -07:00

Kconfig

Revert "apparmor: use SHA-256 library API instead of crypto_shash API"

2025-07-15 22:39:22 -07:00

label.c

apparmor: use __label_make_stale in __aa_proxy_redirect

2026-06-13 20:14:06 -07:00

lib.c

treewide: Replace kmalloc with kmalloc_obj for non-scalar types

2026-02-21 01:02:28 -08:00

lsm.c

apparmor/lsm: Fix aa_dfa_unpack's error handling in aa_setup_dfa_engine

2026-04-22 20:11:08 -07:00

Makefile

apparmor: make all generated string array headers const char *const

2025-05-25 20:15:01 -07:00

match.c

apparmor: propagate -ENOMEM correctly in unpack_table

2026-06-13 20:14:06 -07:00

mount.c

apparmor: change fn_label_build() call to not return NULL

2026-06-13 20:14:07 -07:00

net.c

apparmor: put secmark label after secid lookup

2026-06-13 20:18:30 -07:00

nulldfa.in

…

path.c

apparmor: Fix string overrun due to missing termination

2026-04-22 20:09:05 -07:00

policy_compat.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

policy_ns.c

apparmor: fix: limit the number of levels of policy namespaces

2026-03-09 16:05:43 -07:00

policy_unpack_test.c

Merge tag 'apparmor-pr-2025-08-04' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor

2025-08-04 08:17:28 -07:00

policy_unpack.c

apparmor: fail policy unpack on accept2 allocation failure

2026-06-13 20:14:08 -07:00

policy.c

apparmor: remove or add symlinks to rawdata according to export_binary

2026-06-13 20:14:07 -07:00

procattr.c

apparmor: aa_getprocattr free procattr leak on format failure

2026-06-13 20:18:30 -07:00

resource.c

apparmor: fix rlimit for posix cpu timers

2026-01-29 01:27:54 -08:00

secid.c

lsm: secctx provider check on release

2024-12-04 14:59:57 -05:00

stacksplitdfa.in

…

task.c

apparmor: remove unnecessary goto and associated label

2026-06-13 20:18:17 -07:00