** Description changed: + SRU Justification: Failure to put the cred causes a memory leak that is + larger than the cred struct, as it leaks everything it references. This + happens for every unconfined processes that does an exec, change_hat or + change_profile and passes through this function. + AppArmor fails to drop the cred reference in domain.c:aa_may_change_ptraced_domain - if (tracer) - cred = aa_get_task_policy(tracer, &tracerp); - rcu_read_unlock(); + if (tracer) + cred = aa_get_task_policy(tracer, &tracerp); + rcu_read_unlock(); - if (!tracerp) - return error; <--------- cred reference needs to be dropped here + if (!tracerp) + return error; <--------- cred reference needs to be dropped here
-- AppArmor does not put cred reference causing a leak https://bugs.launchpad.net/bugs/479115 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs