[REGRESSION] AppArmor module parameter layout changed with	c5459b829b716
    David Rheinsberg 
    david.rheinsberg at gmail.com
       
    Mon Apr  8 07:21:13 UTC 2019
    
    
  
Hi
A recent commit changed how `/sys/module/apparmor/parameters/enabled`
looks. It was "Y"/"N" before, now it is an integer. I *think* the
commit that changed this was:
commit c5459b829b716dafd226ad270f25c9a3050f7586
Author: Kees Cook <keescook at chromium.org>
Date:   Thu Sep 13 22:28:48 2018 -0700
    LSM: Plumb visibility into optional "enabled" state
I haven't recompiled with a revert, but changing the module-parameter
type looks like the obvious culprit. I don't see how this change can
be safe?
This breaks the AppArmor detection of `dbus-broker`. Can the commit be reverted?
Thanks
David
    
    
More information about the Linux-security-module-archive
mailing list