diff options
| author | John Johansen <john.johansen@canonical.com> | 2019-12-17 15:40:41 -0800 |
|---|---|---|
| committer | John Johansen <john.johansen@canonical.com> | 2022-10-03 14:49:03 -0700 |
| commit | 22fac8a051191113becc0da62bf88b0ba8ce6c08 (patch) | |
| tree | bd80b87a3408b9ddcbbcfe9ce767af0edcb1468c /security/apparmor/policy_unpack.c | |
| parent | 8c4b785a86be1219f7d50f7b38266c454d6a9bbc (diff) | |
| download | lwn-22fac8a051191113becc0da62bf88b0ba8ce6c08.tar.gz lwn-22fac8a051191113becc0da62bf88b0ba8ce6c08.zip | |
apparmor: add user mode flag
Allow the profile to contain a user mode prompt flag. This works similar
to complain mode but will try to send messages to a userspace daemon.
If the daemon is not present or timesout regular informent will occur.
Signed-off-by: John Johansen <john.johansen@canonical.com>
Diffstat (limited to 'security/apparmor/policy_unpack.c')
| -rw-r--r-- | security/apparmor/policy_unpack.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/security/apparmor/policy_unpack.c b/security/apparmor/policy_unpack.c index 4bf33bd0ca69..04e9fca250df 100644 --- a/security/apparmor/policy_unpack.c +++ b/security/apparmor/policy_unpack.c @@ -761,6 +761,8 @@ static struct aa_profile *unpack_profile(struct aa_ext *e, char **ns_name) } else if (tmp == PACKED_MODE_UNCONFINED) { profile->mode = APPARMOR_UNCONFINED; profile->label.flags |= FLAG_UNCONFINED; + } else if (tmp == PACKED_MODE_USER) { + profile->mode = APPARMOR_USER; } else { goto fail; } |