John Johansen 11c92f144b apparmor: fix mediation of prlimit ...

For primit apparmor requires that if target confinement does not match
the setting task's confinement, the setting task requires CAP_SYS_RESOURCE.

Unfortunately this was broken when rlimit enforcement was reworked to
support labels.

Fixes: 86b92cb782 ("apparmor: move resource checks to using labels")
Signed-off-by: John Johansen <john.johansen@canonical.com>

2018-06-07 01:51:01 -07:00

5.2 KiB

Raw Blame History

View Raw