AppArmor: Fix security_task_setrlimit logic for 2.6.36 changes
authorJohn Johansen <john.johansen@canonical.com>
Mon, 6 Sep 2010 17:10:20 +0000 (10:10 -0700)
committerJames Morris <jmorris@namei.org>
Tue, 7 Sep 2010 23:19:29 +0000 (09:19 +1000)
commit3a2dc8382a3e85a51ed9c6f57ea80665ea7a0c95
tree05b289dc97bf08459911d0b5500896ed80af25c7
parente819ff519b2d74373eca4a9a2b417ebf4c1e1b29
AppArmor: Fix security_task_setrlimit logic for 2.6.36 changes

2.6.36 introduced the abilitiy to specify the task that is having its
rlimits set.  Update mediation to ensure that confined tasks can only
set their own group_leader as expected by current policy.

Add TODO note about extending policy to support setting other tasks
rlimits.

Signed-off-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: James Morris <jmorris@namei.org>
security/apparmor/include/resource.h
security/apparmor/lsm.c
security/apparmor/resource.c