commit | a4c2746f4d4b32d8557ee17821f1101fd8474f92 | [log] [tgz] |
---|---|---|
author | John Johansen <john.johansen@canonical.com> | Wed Apr 11 02:03:26 2018 -0700 |
committer | John Johansen <john.johansen@canonical.com> | Wed Apr 11 13:39:16 2018 -0700 |
tree | 721952399531d8c208ac4e0219efed4a38631652 | |
parent | 588558eb6d0e0b6edfa65a67e906c2ffeba63ff1 [diff] |
apparmor: fix mediation of prlimit For primit apparmor requires that if target confinement does not match the setting task's confinement, the setting task requires CAP_SYS_RESOURCE. Unfortunately this was broken when rlimit enforcement was reworked to support labels. Fixes: 86b92cb782b3 ("apparmor: move resource checks to using labels") Signed-off-by: John Johansen <john.johansen@canonical.com>