Ryan Lee 4c3f731b25 apparmor: allocate xmatch for nullpdb inside aa_alloc_null ...

commit 17d0d04f3c upstream.

attach->xmatch was not set when allocating a null profile, which is used in
complain mode to allocate a learning profile. This was causing downstream
failures in find_attach, which expected a valid xmatch but did not find
one under a certain sequence of profile transitions in complain mode.

This patch ensures the xmatch is set up properly for null profiles.

Signed-off-by: Ryan Lee <ryan.lee@canonical.com>
Signed-off-by: John Johansen <john.johansen@canonical.com>
Cc: Paul Kramme <kramme@digitalmanufaktur.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2025-01-23 17:23:05 +01:00

..

include

…

.gitignore

…

apparmorfs.c

…

audit.c

…

capability.c

…

crypto.c

…

domain.c

…

file.c

…

ipc.c

…

Kconfig

…

label.c

…

lib.c

…

lsm.c

…

Makefile

…

match.c

…

mount.c

…

net.c

…

nulldfa.in

…

path.c

…

policy_compat.c

…

policy_ns.c

…

policy_unpack_test.c

…

policy_unpack.c

…

policy.c

…

procattr.c

…

resource.c

…

secid.c

…

stacksplitdfa.in

…

task.c

…