diff options
| author | John Johansen <john.johansen@canonical.com> | 2026-07-28 13:14:49 -0700 |
|---|---|---|
| committer | John Johansen <john.johansen@canonical.com> | 2026-08-10 22:49:42 -0700 |
| commit | b9f2181b90ec047488dcb4fb1c631d417aff07e0 (patch) | |
| tree | f226c01102829417ce0a64402df4608c6ea19a0a /security | |
| parent | 97dd3f51bf0cb111a2c1cdef7ecca48e31223cb7 (diff) | |
apparmor: fix auditing of mount binary data
AppArmor only mediates non-binary mount data, and should only
audit the mount data if it is non-binary.
Signed-off-by: John Johansen <john.johansen@canonical.com>
Diffstat (limited to 'security')
| -rw-r--r-- | security/apparmor/mount.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/security/apparmor/mount.c b/security/apparmor/mount.c index 8402d29ad524..537d22eb0303 100644 --- a/security/apparmor/mount.c +++ b/security/apparmor/mount.c @@ -345,8 +345,8 @@ static int match_mnt_path_str(const struct cred *subj_cred, audit: return audit_mount(subj_cred, profile, OP_MOUNT, mntpnt, devname, - type, NULL, - flags, data, AA_MAY_MOUNT, &perms, info, error); + type, NULL, flags, !binary ? data : NULL, + AA_MAY_MOUNT, &perms, info, error); } /** |