Aleksa Sarai fdcc9d3cad apparmor: use safe procfs API for labels ...

EnsureProcHandle only protects us against a tmpfs mount, but the risk of
a procfs path being used (such as /proc/self/sched) has been known for a
while. Now that filepath-securejoin has a reasonably safe procfs API,
switch to it.

Fixes: GHSA-cgrx-mc8f-2prm CVE-2025-52881
Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>

2025-11-01 21:24:04 +11:00

..

apparmor_linux.go

apparmor: use safe procfs API for labels

2025-11-01 21:24:04 +11:00

apparmor_unsupported.go

remove pre-go1.17 build-tags

2024-06-29 15:45:25 +02:00

apparmor.go

lint/revive: add package doc comments

2025-10-03 15:17:43 +10:00