security/apparmor/task.c

245 			       struct aa_label *tracer, u32 request,
248 	if (profile_unconfined(tracee) || unconfined(tracer) ||
252 	return profile_ptrace_perm(cred, tracee, tracer, request, ad);
256 			       struct aa_profile *tracer,
260 	if (profile_unconfined(tracer))
263 	if (ANY_RULE_MEDIATES(&tracer->rules, AA_CLASS_PTRACE))
264 		return profile_ptrace_perm(cred, tracer, tracee, request, ad);
267 	if (&tracer->label == tracee)
270 	ad->subj_label = &tracer->label;
273 	ad->error = aa_capable(cred, &tracer->label, CAP_SYS_PTRACE,
276 	return aa_audit(AUDIT_APPARMOR_AUTO, tracer, ad, audit_ptrace_cb);
280  * aa_may_ptrace - test if tracer task can trace the tracee
282  * @tracer: label of the task doing the tracing  (NOT NULL)
289 int aa_may_ptrace(const struct cred *tracer_cred, struct aa_label *tracer,
297 	return xcheck_labels(tracer, tracee, profile,
300 			profile_tracee_perm(tracee_cred, profile, tracer,