John Johansen 3d40658c97 apparmor: fix change_hat not finding hat after policy replacement ... After a policy replacement, the task cred may be out of date and need to be updated. However change_hat is using the stale profiles from the out of date cred resulting in either: a stale profile being applied or, incorrect failure when searching for a hat profile as it has been migrated to the new parent profile. Fixes: 01e2b670aa (failure to find hat) Fixes: 898127c34e (stale policy being applied) Bugzilla: https://bugzilla.suse.com/show_bug.cgi?id=1000287 Cc: stable@vger.kernel.org Signed-off-by: John Johansen <john.johansen@canonical.com> Signed-off-by: James Morris <james.l.morris@oracle.com>		2016-11-21 18:01:28 +11:00
..
apparmor	apparmor: fix change_hat not finding hat after policy replacement	2016-11-21 18:01:28 +11:00
integrity	Merge branch 'work.xattr' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2016-10-10 17:11:50 -07:00
keys	security/keys: make BIG_KEYS dependent on stdrng.	2016-10-27 16:03:33 +11:00
loadpin	LSM: LoadPin: provide enablement CONFIG	2016-05-17 20:10:30 +10:00
selinux	mm: Change vm_is_stack_for_task() to vm_is_stack_for_current()	2016-10-20 09:21:41 +02:00
smack	Merge branch 'work.xattr' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2016-10-10 17:11:50 -07:00
tomoyo	mm: replace get_user_pages_remote() write/force parameters with gup_flags	2016-10-19 08:12:02 -07:00
yama	Yama: fix double-spinlock and user access in atomic context	2016-05-26 09:56:18 +10:00
commoncap.c	xattr: Add __vfs_{get,set,remove}xattr helpers	2016-10-07 20:10:44 -04:00
device_cgroup.c	security/device_cgroup: Fix RCU_LOCKDEP_WARN() condition	2015-09-03 18:13:10 -07:00
inode.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2016-10-10 20:16:43 -07:00
Kconfig	- force check_object_size() to be inline too	2016-09-07 14:03:49 -07:00
lsm_audit.c	Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security	2016-10-04 14:48:27 -07:00
Makefile	LSM: LoadPin for kernel file loading restrictions	2016-04-21 10:47:27 +10:00
min_addr.c
security.c	security, overlayfs: Provide hook to correctly label newly created files	2016-08-08 20:46:46 -04:00