AppArmor fails to drop the cred reference in domain.c:aa_may_change_ptraced_domain if (tracer) cred = aa_get_task_policy(tracer, &tracerp); rcu_read_unlock();
if (!tracerp) return error; <--------- cred reference needs to be dropped here
AppArmor fails to drop the cred reference in domain. c:aa_may_ change_ ptraced_ domain task_policy( tracer, &tracerp);
if (tracer)
cred = aa_get_
rcu_read_unlock();
if (!tracerp)
return error; <--------- cred reference needs to be dropped here