Merge lp:~talkless/apparmor/seven_digit_pid into lp:apparmor/2.12

[Vincas Dargis]

Allow pids up to PID_MAX_LIMIT which is 2^22 (a seven digit 4194304)

Fixes https://bugs.launchpad.net/apparmor/+bug/1717714

[intrigeri (intrigeri)]

Looks good to me, thanks Vincas!

review: Approve

[Steve Beattie (sbeattie)]

Looks good to me, too, merged to trunk and 2.11 branch.

Thanks!

review: Approve

=== modified file 'profiles/apparmor.d/tunables/kernelvars'
--- profiles/apparmor.d/tunables/kernelvars	2013-01-02 23:02:29 +0000
+++ profiles/apparmor.d/tunables/kernelvars	2017-09-30 12:31:56 +0000
@@ -13,7 +13,7 @@
 # and until the parser supports nested groupings like
 #   @{pid}=[1-9]{[0-9]{[0-9]{[0-9]{[0-9]{[0-9],},},},},}
 # use
-@{pid}={[1-9],[1-9][0-9],[1-9][0-9][0-9],[1-9][0-9][0-9][0-9],[1-9][0-9][0-9][0-9][0-9],[1-9][0-9][0-9][0-9][0-9][0-9]}
+@{pid}={[1-9],[1-9][0-9],[1-9][0-9][0-9],[1-9][0-9][0-9][0-9],[1-9][0-9][0-9][0-9][0-9],[1-9][0-9][0-9][0-9][0-9][0-9],[1-4][0-9][0-9][0-9][0-9][0-9][0-9]}
 
 #same pattern as @{pid} for now
 @{tid}=@{pid}