John Johansen d79e57db45 apparmor: ensure that dfa state tables have entries ... commit c27c6bd2c4 upstream. Currently it is possible to specify a state machine table with 0 length, this is not valid as optional tables are specified by not defining the table as present. Further this allows by-passing the base tables range check against the next/check tables. Fixes: d901d6a298 ("apparmor: dfa split verification of table headers") Reported-by: Mike Salvatore <mike.salvatore@canonical.com> Signed-off-by: John Johansen <john.johansen@canonical.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2020-07-22 09:33:05 +02:00
..
apparmor	apparmor: ensure that dfa state tables have entries	2020-07-22 09:33:05 +02:00
integrity	ima: Set again build_ima_appraise variable	2020-06-22 09:31:17 +02:00
keys	mm: add kvfree_sensitive() for freeing sensitive data objects	2020-06-17 16:40:23 +02:00
loadpin	…
lockdown	lockdown: Allow unprivileged users to see lockdown status	2020-06-22 09:30:53 +02:00
safesetid	…
selinux	selinux: fix double free	2020-06-24 17:50:48 +02:00
smack	Smack: slab-out-of-bounds in vsscanf	2020-06-17 16:40:36 +02:00
tomoyo	…
yama	…
Kconfig	…
Kconfig.hardening	…
Makefile	…
commoncap.c	exec: Always set cap_ambient in cap_bprm_set_creds	2020-06-03 08:21:23 +02:00
device_cgroup.c	…
inode.c	…
lsm_audit.c	…
min_addr.c	…
security.c	…