Commit 68ff8540 authored by John Johansen's avatar John Johansen
Browse files

apparmor: fix quiet_denied for file rules 



Global quieting of denied AppArmor generated file events is not
handled correctly. Unfortunately the is checking if quieting of all
audit events is set instead of just denied events.

Fixes: 67012e82 ("AppArmor: basic auditing infrastructure.")
Signed-off-by: default avatarJohn Johansen <john.johansen@canonical.com>
parent ba77f390

security/apparmor/audit.c

+1 −1
Original line number Diff line number Diff line
@@ -137,7 +137,7 @@ int aa_audit(int type, struct aa_profile *profile, struct common_audit_data *sa, 
	}

	if (AUDIT_MODE(profile) == AUDIT_QUIET ||

	    (type == AUDIT_APPARMOR_DENIED &&

	     AUDIT_MODE(profile) == AUDIT_QUIET))

	     AUDIT_MODE(profile) == AUDIT_QUIET_DENIED))

		return aad(sa)->error;



	if (KILL_MODE(profile) && type == AUDIT_APPARMOR_DENIED)