Skip to content

Commit 2f6701a

Browse files
committed
apparmor: advertise the tcp fast open fix is applied
The fix for tcp-fast-open ensures that the connect permission is being mediated correctly but it didn't add an artifact to the feature set to advertise the fix is available. Add an artifact so that the test suite can identify if the fix has not been properly applied or a new unexpected regression has occurred. Fixes: 4d587cd ("apparmor: mediate the implicit connect of TCP fast open sendmsg") Signed-off-by: John Johansen <john.johansen@canonical.com>
1 parent 4d587cd commit 2f6701a

1 file changed

Lines changed: 2 additions & 0 deletions

File tree

security/apparmor/net.c

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -22,12 +22,14 @@
2222

2323
struct aa_sfs_entry aa_sfs_entry_network[] = {
2424
AA_SFS_FILE_STRING("af_mask", AA_SFS_AF_MASK),
25+
AA_SFS_FILE_BOOLEAN("tcp-fast-open", 1),
2526
{ }
2627
};
2728

2829
struct aa_sfs_entry aa_sfs_entry_networkv9[] = {
2930
AA_SFS_FILE_STRING("af_mask", AA_SFS_AF_MASK),
3031
AA_SFS_FILE_BOOLEAN("af_unix", 1),
32+
AA_SFS_FILE_BOOLEAN("tcp-fast-open", 1),
3133
{ }
3234
};
3335

0 commit comments

Comments
 (0)