The subset test is not taking into account the unconfined exception which will cause profile transitions in the stacked confinement case to fail when no_new_privs is applied. This fixes a regression introduced in the fix for https://bugs.launchpad.net/bugs/1839037 BugLink: https://bugs.launchpad.net/bugs/1844186 Signed-off-by: John Johansen <john.johansen@canonical.com> |
||
|---|---|---|
| .. | ||
| apparmor.h | ||
| apparmorfs.h | ||
| audit.h | ||
| capability.h | ||
| cred.h | ||
| crypto.h | ||
| domain.h | ||
| file.h | ||
| ipc.h | ||
| label.h | ||
| lib.h | ||
| match.h | ||
| mount.h | ||
| net.h | ||
| path.h | ||
| perms.h | ||
| policy.h | ||
| policy_ns.h | ||
| policy_unpack.h | ||
| procattr.h | ||
| resource.h | ||
| secid.h | ||
| sig_names.h | ||
| task.h | ||