Skip to content

Commit

Permalink
apparmor: fix audit full profile hname on successful load
Browse files Browse the repository at this point in the history
Currently logging of a successful profile load only logs the basename
of the profile. This can result in confusion when a child profile has
the same name as the another profile in the set. Logging the hname
will ensure there is no confusion.

Signed-off-by: John Johansen <[email protected]>
Acked-by: Seth Arnold <[email protected]>
  • Loading branch information
John Johansen committed Jul 12, 2016
1 parent bf15cf0 commit 7ee6da2
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion security/apparmor/policy.c
Original file line number Diff line number Diff line change
Expand Up @@ -1159,7 +1159,7 @@ ssize_t aa_replace_profiles(void *udata, size_t size, bool noreplace)
list_del_init(&ent->list);
op = (!ent->old && !ent->rename) ? OP_PROF_LOAD : OP_PROF_REPL;

audit_policy(op, GFP_ATOMIC, ent->new->base.name, NULL, error);
audit_policy(op, GFP_ATOMIC, ent->new->base.hname, NULL, error);

if (ent->old) {
__replace_profile(ent->old, ent->new, 1);
Expand Down

0 comments on commit 7ee6da2

Please sign in to comment.