projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: cf65fab) | patch
apparmor: use the dfa to do label parse string splitting
authorJohn Johansen <john.johansen@canonical.com>
Wed, 6 Sep 2017 21:57:59 +0000 (14:57 -0700)
committerJohn Johansen <john.johansen@canonical.com>
Fri, 9 Feb 2018 19:30:01 +0000 (11:30 -0800)
commit6e0654d20ed9679cbf75a0ff7cd786e364f7f09a
tree9c15e28e85b9cc66984e3a6fdb7101a2ae2b0a58tree | snapshot
parentcf65fabc2a2c8c12031678d86a2bd4a660865011commit | diff
apparmor: use the dfa to do label parse string splitting

The current split scheme is actually wrong in that it splits
  ///&

where that is invalid and should fail. Use the dfa to do a proper
bounded split without having to worry about getting the string
processing right in code.

Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Seth Arnold <seth.arnold@canonical.com>
security/apparmor/include/label.h diff | blob | history
security/apparmor/include/match.h diff | blob | history
security/apparmor/label.c diff | blob | history
security/apparmor/match.c diff | blob | history
security/apparmor/stacksplitdfa.in [new file with mode: 0644] blob