Ruoyu Wang a58cafd38b apparmor: check label build before no_new_privs test ...

aa_change_profile() builds a replacement label with
fn_label_build_in_scope() before the no_new_privs subset check. The build
helper can fail and return NULL or an ERR_PTR, but the result was passed
to aa_label_is_unconfined_subset() before the existing IS_ERR_OR_NULL()
check.

Reuse the existing target-label build failure handling immediately after
the build. This preserves the current audit handling while preventing the
subset helper from dereferencing an invalid label.

Fixes: e00b02bb6a ("apparmor: move change_profile mediation to using labels")
Signed-off-by: Ruoyu Wang <ruoyuw560@gmail.com>
Signed-off-by: John Johansen <john.johansen@canonical.com>

2026-06-13 20:14:06 -07:00

..

include

apparmor: add a conditional version of get_newest_label

2026-06-13 20:14:06 -07:00

.gitignore

.gitignore: add SPDX License Identifier

2020-03-25 11:50:48 +01:00

.kunitconfig

apparmor: add .kunitconfig

2026-02-01 12:01:19 -08:00

af_unix.c

apparmor: fix refcount leak when updating the sk_ctx

2026-06-13 20:14:06 -07:00

apparmorfs.c

security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref()

2026-06-13 20:14:06 -07:00

audit.c

treewide: Replace kmalloc with kmalloc_obj for non-scalar types

2026-02-21 01:02:28 -08:00

capability.c

apparmor: transition from a list of rules to a vector of rules

2025-07-20 02:31:06 -07:00

crypto.c

apparmor: move initcalls to the LSM framework

2025-10-22 19:24:27 -04:00

domain.c

apparmor: check label build before no_new_privs test

2026-06-13 20:14:06 -07:00

file.c

apparmor: fix fast path cache check for unix sockets

2026-01-29 01:27:54 -08:00

ipc.c

apparmor: transition from a list of rules to a vector of rules

2025-07-20 02:31:06 -07:00

Kconfig

Revert "apparmor: use SHA-256 library API instead of crypto_shash API"

2025-07-15 22:39:22 -07:00

label.c

apparmor: add a conditional version of get_newest_label

2026-06-13 20:14:06 -07:00

lib.c

treewide: Replace kmalloc with kmalloc_obj for non-scalar types

2026-02-21 01:02:28 -08:00

lsm.c

apparmor/lsm: Fix aa_dfa_unpack's error handling in aa_setup_dfa_engine

2026-04-22 20:11:08 -07:00

Makefile

apparmor: make all generated string array headers const char *const

2025-05-25 20:15:01 -07:00

match.c

Merge tag 'apparmor-pr-2026-04-23' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor

2026-04-24 09:22:21 -07:00

mount.c

apparmor: transition from a list of rules to a vector of rules

2025-07-20 02:31:06 -07:00

net.c

apparmor: fix NULL sock in aa_sock_file_perm

2026-01-22 04:51:55 -08:00

nulldfa.in

apparmor: cleanup add proper line wrapping to nulldfa.in

2018-02-09 11:30:01 -08:00

path.c

apparmor: Fix string overrun due to missing termination

2026-04-22 20:09:05 -07:00

policy_compat.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

policy_ns.c

apparmor: fix: limit the number of levels of policy namespaces

2026-03-09 16:05:43 -07:00

policy_unpack_test.c

Merge tag 'apparmor-pr-2025-08-04' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor

2025-08-04 08:17:28 -07:00

policy_unpack.c

Merge tag 'apparmor-pr-2026-04-23' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor

2026-04-24 09:22:21 -07:00

policy.c

apparmor: fix race on rawdata dereference

2026-03-09 16:05:44 -07:00

procattr.c

apparmor: Improve debug print infrastructure

2025-01-18 06:47:11 -08:00

resource.c

apparmor: fix rlimit for posix cpu timers

2026-01-29 01:27:54 -08:00

secid.c

lsm: secctx provider check on release

2024-12-04 14:59:57 -05:00

stacksplitdfa.in

apparmor: use the dfa to do label parse string splitting

2018-02-09 11:30:01 -08:00

task.c

apparmor: userns: Add support for execpath in userns

2026-01-29 01:27:53 -08:00