0005-UBUNTU-SAUCE-Revert-fix-only-allow-a-single-threaded.patch

From a48afa3ec1bba286ff022111ba4d081e08257893 Mon Sep 17 00:00:00 2001
From: John Johansen <john.johansen@canonical.com>
Date: Mon, 6 Oct 2014 11:16:42 -0700
Subject: [PATCH 05/10] UBUNTU: SAUCE: Revert: fix: only allow a single
 threaded process to ...

Revert the enforcement of only a single thread tasks using change_onexec.
While this change prevents applications from using change_onexec in
a potentially broken way (it can be done right but the application code
using it needs to be carefully audited), it does restrict historically
allowed behavior. Specifically this change is causes docker to fail, and
needs to be reverted until it can be selectively applied with policy
changes.

BugLink: http://bugs.launchpad.net/bugs/1371310

Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Stefan Bader <stefan.bader@canonical.com>
Signed-off-by: Tim Gardner <tim.gardner@canonical.com>
Signed-off-by: BirdZhang <0312birdzhang@gmail.com>
---
 security/apparmor/domain.c | 7 -------
 1 file changed, 7 deletions(-)

diff --git a/security/apparmor/domain.c b/security/apparmor/domain.c
index 6344b3f1..09eb1a99 100644
--- a/security/apparmor/domain.c
+++ b/security/apparmor/domain.c
@@ -822,13 +822,6 @@ int aa_change_profile(const char *ns_name, const char *hname, bool onexec,
 	if (error)
 		goto audit;
 
-	if (onexec && !current_is_single_threaded()) {
-		info = "not a single threaded task";
-		error = -EACCES;
-		goto audit;
-	}
-
-
 	if (permtest)
 		goto audit;
 
-- 
2.17.1