Kees Cook e33c1b9923 apparmor: Restore Y/N in /sys for apparmor's "enabled" ...

Before commit c5459b829b ("LSM: Plumb visibility into optional "enabled"
state"), /sys/module/apparmor/parameters/enabled would show "Y" or "N"
since it was using the "bool" handler. After being changed to "int",
this switched to "1" or "0", breaking the userspace AppArmor detection
of dbus-broker. This restores the Y/N output while keeping the LSM
infrastructure happy.

Before:
	$ cat /sys/module/apparmor/parameters/enabled
	1

After:
	$ cat /sys/module/apparmor/parameters/enabled
	Y

Reported-by: David Rheinsberg <[email protected]>
Reviewed-by: David Rheinsberg <[email protected]>
Link: https://lkml.kernel.org/r/CADyDSO6k8vYb1eryT4g6+EHrLCvb68GAbHVWuULkYjcZcYNhhw@mail.gmail.com
Fixes: c5459b829b ("LSM: Plumb visibility into optional "enabled" state")
Signed-off-by: Kees Cook <[email protected]>
Signed-off-by: John Johansen <[email protected]>

2019-04-10 04:24:48 -07:00

..

include

Merge tag 'audit-pr-20190305' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit

2019-03-07 12:20:11 -08:00

.gitignore

apparmor: add base infastructure for socket mediation

2018-03-13 17:25:48 -07:00

apparmorfs.c

Merge tag 'apparmor-pr-2019-03-12' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor

2019-03-13 11:07:36 -07:00

audit.c

audit: remove unused actx param from audit_rule_match

2019-01-31 23:00:15 -05:00

capability.c

LSM: generalize flag passing to security_capable

2019-01-10 14:16:06 -08:00

crypto.c

crypto: drop mask=CRYPTO_ALG_ASYNC from 'shash' tfm allocations

2018-11-20 14:26:55 +08:00

domain.c

Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security

2019-03-07 11:44:01 -08:00

file.c

apparmor: Replace spin_is_locked() with lockdep

2018-10-03 06:29:22 -07:00

ipc.c

LSM: generalize flag passing to security_capable

2019-01-10 14:16:06 -08:00

Kconfig

apparmor: Remove SECURITY_APPARMOR_BOOTPARAM_VALUE

2019-01-08 13:18:43 -08:00

label.c

apparmor: fixup secid map conversion to using IDR

2018-06-07 01:50:49 -07:00

lib.c

apparmor: Fix uninitialized value in aa_split_fqname

2018-10-03 06:29:22 -07:00

lsm.c

apparmor: Restore Y/N in /sys for apparmor's "enabled"

2019-04-10 04:24:48 -07:00

Makefile

apparmor: add base infastructure for socket mediation

2018-03-13 17:25:48 -07:00

match.c

apparmor: fix typo "traverse"

2018-05-03 00:50:12 -07:00

mount.c

vfs: Suppress MS_* flag defs within the kernel unless explicitly enabled

2018-12-20 16:32:56 +00:00

net.c

apparmor: add #ifdef checks for secmark filtering

2018-10-12 17:09:56 -07:00

nulldfa.in

apparmor: cleanup add proper line wrapping to nulldfa.in

2018-02-09 11:30:01 -08:00

path.c

apparmor: Move path lookup to using preallocated buffers

2017-06-08 11:29:34 -07:00

policy_ns.c

apparmor: fix an error code in __aa_create_ns()

2018-08-21 16:24:56 -07:00

policy_unpack.c

apparmor: fix double free when unpack of secmark rules fails

2019-03-12 03:48:02 -07:00

policy.c

apparmor: fix checkpatch error in Parse secmark policy

2018-11-01 22:28:17 -07:00

procattr.c

apparmor: move context.h to cred.h

2018-02-09 11:30:01 -08:00

resource.c

LSM: generalize flag passing to security_capable

2019-01-10 14:16:06 -08:00

secid.c

Merge tag 'apparmor-pr-2018-11-01' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor

2018-11-02 10:04:26 -07:00

stacksplitdfa.in

apparmor: use the dfa to do label parse string splitting

2018-02-09 11:30:01 -08:00

task.c

AppArmor: Abstract use of cred security blob

2019-01-08 13:18:44 -08:00