Messages in this thread | | | Date | Wed, 1 Jun 2011 10:25:37 +1000 (EST) | From | James Morris <> | Subject | Re: [PATCH] AppArmor: fix oops in apparmor_setprocattr |
| |
On Tue, 31 May 2011, Kees Cook wrote:
> When invalid parameters are passed to apparmor_setprocattr a NULL deref > oops occurs when it tries to record an audit message. This is because > it is passing NULL for the profile parameter for aa_audit. But aa_audit > now requires that the profile passed is not NULL. > > Fix this by passing the current profile on the task that is trying to > setprocattr.
Is this trigger able by unprivileged users?
From which upstream commit is this an issue?
- James -- James Morris <jmorris@namei.org>
| |