From 938ac0b38ce519d41b2e81ade29b45f08bfab0c9 Mon Sep 17 00:00:00 2001 From: John Johansen Date: Tue, 19 Mar 2024 05:26:10 -0700 Subject: [PATCH] UBUNTU: SAUCE: apparmor4.0.0 [89/90]:apparmor: disable tailglob responses for now BugLink: http://bugs.launchpad.net/bugs/2028253 Tailglob responses are currently unused, and there are a few bugs that need to be fixed. Sp just disable access. Signed-off-by: John Johansen (cherry picked from commit 7cdddcf0388b3d215dd0a87ca6a9c8b24ce1e780 https://git.launchpad.net/~apparmor-dev/ubuntu-kernel-next) Signed-off-by: Paolo Pisati --- security/apparmor/notify.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/security/apparmor/notify.c b/security/apparmor/notify.c index 6b5ab25c92d7..bf6857bc8a56 100644 --- a/security/apparmor/notify.c +++ b/security/apparmor/notify.c @@ -603,8 +603,7 @@ static bool response_is_valid_name(struct apparmor_notif_resp_name *reply, return -EINVAL; } /* currently supported flags */ - if ((reply->perm.base.flags != (URESPONSE_LOOKUP | URESPONSE_PROFILE)) || - (reply->perm.base.flags != (URESPONSE_TAILGLOB))) { + if ((reply->perm.base.flags != (URESPONSE_LOOKUP | URESPONSE_PROFILE))) { AA_DEBUG(DEBUG_UPCALL, "id %lld: reply bad flags 0x%x expected 0x%x", knotif->id, reply->perm.base.flags,