diff options
| author | John Johansen <john.johansen@canonical.com> | 2024-11-10 13:29:31 +0100 |
|---|---|---|
| committer | John Johansen <john.johansen@canonical.com> | 2024-11-27 04:21:06 +0100 |
| commit | 04b5f0a5bfee5a5886dc19296c90d9a6964275e4 (patch) | |
| tree | 0d6133af513aa2e3e63b293ae9bc46ca7638abb5 /security/apparmor | |
| parent | apparmor: replace misleading 'scrubbing environment' phrase in debug print (diff) | |
| download | linux-04b5f0a5bfee5a5886dc19296c90d9a6964275e4.tar.xz linux-04b5f0a5bfee5a5886dc19296c90d9a6964275e4.zip | |
apparmor: lift new_profile declaration to remove C23 extension warning
the kernel test robot reports a C23 extension
warning: label followed by a declaration is a C23 extension
[-Wc23-extensions]
696 | struct aa_profile *new_profile = NULL;
Instead of adding a null statement creating a C99 style inline var
declaration lift the label declaration out of the block so that it no
longer immediatedly follows the label.
Reported-by: kernel test robot <lkp@intel.com>
Closes: https://lore.kernel.org/oe-kbuild-all/202411101808.AI8YG6cs-lkp@intel.com/
Fixes: ee650b3820f3 ("apparmor: properly handle cx/px lookup failure for complain")
Signed-off-by: John Johansen <john.johansen@canonical.com>
Diffstat (limited to 'security/apparmor')
| -rw-r--r-- | security/apparmor/domain.c | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/security/apparmor/domain.c b/security/apparmor/domain.c index 75d3bd02c067..5939bd9a9b9b 100644 --- a/security/apparmor/domain.c +++ b/security/apparmor/domain.c @@ -636,6 +636,7 @@ static struct aa_label *profile_transition(const struct cred *subj_cred, struct aa_ruleset *rules = list_first_entry(&profile->rules, typeof(*rules), list); struct aa_label *new = NULL; + struct aa_profile *new_profile = NULL; const char *info = NULL, *name = NULL, *target = NULL; aa_state_t state = rules->file->start[AA_CLASS_FILE]; struct aa_perms perms = {}; @@ -692,8 +693,6 @@ static struct aa_label *profile_transition(const struct cred *subj_cred, } else if (COMPLAIN_MODE(profile)) { create_learning_profile: /* no exec permission - learning mode */ - struct aa_profile *new_profile = NULL; - new_profile = aa_new_learning_profile(profile, false, name, GFP_KERNEL); if (!new_profile) { |