| commit | 192ca6b55a866e838aee98d9cb6a0b5086467c03 | [log] [tgz] |
|---|---|---|
| author | John Johansen <john.johansen@canonical.com> | Fri Jun 09 11:58:42 2017 -0700 |
| committer | John Johansen <john.johansen@canonical.com> | Sat Jun 10 17:11:37 2017 -0700 |
| tree | eba93d671a1476432f357fa68e6842f548e2cb2f | |
| parent | 2835a13bbdc09d330eafdf5e67eb407c90c01ab7 [diff] |
apparmor: revalidate files during exec Instead of running file revalidation lazily when read/write are called copy selinux and revalidate the file table on exec. This avoids extra mediation overhead in read/write and also prevents file handles being passed through to a grand child unchecked. Signed-off-by: John Johansen <john.johansen@canonical.com>