John Johansen c29bceb396 Fix execve behavior apparmor for PR_{GET,SET}_NO_NEW_PRIVS ...

Add support for AppArmor to explicitly fail requested domain transitions
if NO_NEW_PRIVS is set and the task is not unconfined.

Transitions from unconfined are still allowed because this always results
in a reduction of privileges.

Acked-by: Eric Paris <eparis@redhat.com>
Signed-off-by: Will Drewry <wad@chromium.org>
Signed-off-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: Andy Lutomirski <luto@amacapital.net>

v18: new acked-by, new description
Signed-off-by: James Morris <james.l.morris@oracle.com>

2012-04-14 11:13:18 +10:00

..

apparmor

Fix execve behavior apparmor for PR_{GET,SET}_NO_NEW_PRIVS

2012-04-14 11:13:18 +10:00

integrity

…

keys

…

selinux

Add PR_{GET,SET}_NO_NEW_PRIVS to prevent execve from granting privs

2012-04-14 11:13:18 +10:00

smack

…

tomoyo

…

yama

…

capability.c

…

commoncap.c

Add PR_{GET,SET}_NO_NEW_PRIVS to prevent execve from granting privs

2012-04-14 11:13:18 +10:00

device_cgroup.c

…

inode.c

…

Kconfig

…

lsm_audit.c

…

Makefile

…

min_addr.c

…

security.c

…