Commit 2654bfbc authored by John Johansen's avatar John Johansen
Browse files

apparmor: fix fully qualified name parsing 



currently apparmor name parsing is only correctly handling
:<NS>:<profile>

but
:<NS>://<profile>

is also a valid form and what is exported to userspace.

Signed-off-by: default avatarJohn Johansen <john.johansen@canonical.com>
parent 3eea57c2

security/apparmor/lib.c

+4 −2
Original line number Diff line number Diff line
@@ -45,8 +45,10 @@ char *aa_split_fqname(char *fqname, char **ns_name) 
		*ns_name = skip_spaces(&name[1]);

		if (split) {

			/* overwrite ':' with \0 */

			*split = 0;

			name = skip_spaces(split + 1);

			*split++ = 0;

			if (strncmp(split, "//", 2) == 0)

				split += 2;

			name = skip_spaces(split);

		} else

			/* a ns name without a following profile is allowed */

			name = NULL;