Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel os linux

apparmor: remove "permipc" command

The "permipc" command is unused and unfinished, remove it.

Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Kees Cook <kees@ubuntu.com>

-9
-1
security/apparmor/include/procattr.h
··· 21 21 int aa_getprocattr(struct aa_profile *profile, char **string); 22 22 int aa_setprocattr_changehat(char *args, size_t size, int test); 23 23 int aa_setprocattr_changeprofile(char *fqname, bool onexec, int test); 24 - int aa_setprocattr_permipc(char *fqname); 25 24 26 25 #endif /* __AA_PROCATTR_H */
-2
security/apparmor/lsm.c
··· 572 572 } else if (strcmp(command, "permprofile") == 0) { 573 573 error = aa_setprocattr_changeprofile(args, !AA_ONEXEC, 574 574 AA_DO_TEST); 575 - } else if (strcmp(command, "permipc") == 0) { 576 - error = aa_setprocattr_permipc(args); 577 575 } else { 578 576 struct common_audit_data sa; 579 577 struct apparmor_audit_data aad = {0,};
-6
security/apparmor/procattr.c
··· 163 163 name = aa_split_fqname(fqname, &ns_name); 164 164 return aa_change_profile(ns_name, name, onexec, test); 165 165 } 166 - 167 - int aa_setprocattr_permipc(char *fqname) 168 - { 169 - /* TODO: add ipc permission querying */ 170 - return -ENOTSUPP; 171 - }