UBUNTU: SAUCE: apparmor4.0.0 [89/90]:apparmor: disable tailglob responses for now

BugLink: http://bugs.launchpad.net/bugs/2028253

Tailglob responses are currently unused, and there are a few bugs
that need to be fixed. Sp just disable access.

Signed-off-by: John Johansen <john.johansen@canonical.com>
(cherry picked from commit 7cdddcf0388b3d215dd0a87ca6a9c8b24ce1e780
https://git.launchpad.net/~apparmor-dev/ubuntu-kernel-next)
Signed-off-by: Paolo Pisati <paolo.pisati@canonical.com>
This commit is contained in:
John Johansen
2024-03-19 05:26:10 -07:00
committed by Paolo Pisati
parent 11bd800e8f
commit 938ac0b38c
+1 -2
View File
@@ -603,8 +603,7 @@ static bool response_is_valid_name(struct apparmor_notif_resp_name *reply,
return -EINVAL;
}
/* currently supported flags */
if ((reply->perm.base.flags != (URESPONSE_LOOKUP | URESPONSE_PROFILE)) ||
(reply->perm.base.flags != (URESPONSE_TAILGLOB))) {
if ((reply->perm.base.flags != (URESPONSE_LOOKUP | URESPONSE_PROFILE))) {
AA_DEBUG(DEBUG_UPCALL,
"id %lld: reply bad flags 0x%x expected 0x%x",
knotif->id, reply->perm.base.flags,