John Johansen 11c92f144b apparmor: fix mediation of prlimit ...

For primit apparmor requires that if target confinement does not match
the setting task's confinement, the setting task requires CAP_SYS_RESOURCE.

Unfortunately this was broken when rlimit enforcement was reworked to
support labels.

Fixes: 86b92cb782 ("apparmor: move resource checks to using labels")
Signed-off-by: John Johansen <john.johansen@canonical.com>

2018-06-07 01:51:01 -07:00

..

apparmor

apparmor: fix mediation of prlimit

2018-06-07 01:51:01 -07:00

integrity

ima: Fallback to the builtin hash algorithm

2018-03-25 07:26:32 -04:00

keys

headers: untangle kmemleak.h from mm.h

2018-04-05 21:36:27 -07:00

loadpin

get rid of pointless includes of fs_struct.h

2018-02-22 14:28:50 -05:00

selinux

ipc/msg: introduce msgctl(MSG_STAT_ANY)

2018-04-11 10:28:37 -07:00

smack

ipc/msg: introduce msgctl(MSG_STAT_ANY)

2018-04-11 10:28:37 -07:00

tomoyo

net: make getname() functions return length rather than use int* parameter

2018-02-12 14:15:04 -05:00

yama

pids: introduce find_get_task_by_vpid() helper

2018-02-06 18:32:46 -08:00

commoncap.c

commoncap: Handle memory allocation failure.

2018-04-10 19:17:41 -05:00

device_cgroup.c

device_cgroup: prepare code for bpf-based device controller

2017-11-05 23:26:51 +09:00

inode.c

securityfs: add the ability to support symlinks

2017-06-08 12:51:43 -07:00

Kconfig

Merge tag 'usercopy-v4.16-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux

2018-02-03 16:25:42 -08:00

lsm_audit.c

lsm_audit: update my email address

2017-08-17 15:33:39 -04:00

Makefile

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

min_addr.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

security.c

Merge tag 'trace-v4.17' of git://git.kernel.org/pub/scm/linux/kernel/git/rostedt/linux-trace

2018-04-10 11:27:30 -07:00