{"ref":"refs/heads/master-lt-3.2-imx6","push_id":55767660,"commits":[{"sha":"a196349b8f5f5d303271dc4623286d2a375fe0cd","author":{"email":"28c604219333b0b085913923f8c4c96032f02c12@canonical.com","name":"John Johansen"},"url":"https://api.github.com/repos/dirkbehme/linux/commits/a196349b8f5f5d303271dc4623286d2a375fe0cd","message":"AppArmor: compatibility patch for v5 network controll\n\nAdd compatibility for v5 network rules.\n\nSigned-off-by: John Johansen <john.johansen@canonical.com>"},{"sha":"147a6bb51b6b13b0455719d6b40a730089c0b6a8","author":{"email":"28c604219333b0b085913923f8c4c96032f02c12@canonical.com","name":"John Johansen"},"url":"https://api.github.com/repos/dirkbehme/linux/commits/147a6bb51b6b13b0455719d6b40a730089c0b6a8","message":"AppArmor: compatibility patch for v5 interface\n\nSigned-off-by: John Johansen <john.johansen@canonical.com>"},{"sha":"7f41953a245fd475e63448149e2b84ee8df016e4","author":{"email":"28c604219333b0b085913923f8c4c96032f02c12@canonical.com","name":"John Johansen"},"url":"https://api.github.com/repos/dirkbehme/linux/commits/7f41953a245fd475e63448149e2b84ee8df016e4","message":"AppArmor: Allow dfa backward compatibility with broken userspace\n\nThe apparmor_parser when compiling policy could generate invalid dfas\nthat did not have sufficient padding to avoid invalid references, when\nused by the kernel.  The kernels check to verify the next/check table\nsize was broken meaning invalid dfas were being created by userspace\nand not caught.\n\nTo remain compatible with old tools that are not fixed, pad the loaded\ndfas next/check table.  The dfa's themselves are valid except for the\nhigh padding for potentially invalid transitions (high bounds error),\nwhich have a maximimum is 256 entries.  So just allocate an extra null filled\n256 entries for the next/check tables.  This will guarentee all bounds\nare good and invalid transitions go to the null (0) state.\n\nSigned-off-by: John Johansen <john.johansen@canonical.com>"}],"head":"7f41953a245fd475e63448149e2b84ee8df016e4","size":3}