apparmor: fix display of .ns_name for containers
authorJohn Johansen <john.johansen@canonical.com>
Tue, 23 Jan 2018 09:47:42 +0000 (01:47 -0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 19 Apr 2018 06:54:10 +0000 (08:54 +0200)
commitd12b8ce551d7914fc2c20b3f5ecc164cb31c6852
treec0705ca173b82049f3560518664d470b98f881e7
parent76d169b8bb7157152f863f659f8b8e75991d2d26
apparmor: fix display of .ns_name for containers

commit 040d9e2bce0a5b321c402b79ee43a8e8d2fd3b06 upstream.

The .ns_name should not be virtualized by the current ns view. It
needs to report the ns base name as that is being used during startup
as part of determining apparmor policy namespace support.

BugLink: http://bugs.launchpad.net/bugs/1746463
Fixes: d9f02d9c237aa ("apparmor: fix display of ns name")
Cc: Stable <stable@vger.kernel.org>
Reported-by: Serge Hallyn <serge@hallyn.com>
Tested-by: Serge Hallyn <serge@hallyn.com>
Signed-off-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
security/apparmor/apparmorfs.c