On 8/5/26 08:10, Jann Horn wrote:
On Tue, Jul 14, 2026 at 5:39 PM Jann Horn <[email protected]> wrote:
AppArmor's begin_current_label_crit_section() is a scary function called
from lots of LSM hooks (in particular VFS/socket-related ones) that checks
if the label referenced by the current creds is marked FLAG_STALE, and if
so, attempts to use aa_replace_current_label() to replace the creds with an
updated version that uses a new label.
ping, I've seen no activity on this fix since posting it
sorry, just swamped and not catching up so far.
I am looking at it now
