From b9f2181b90ec047488dcb4fb1c631d417aff07e0 Mon Sep 17 00:00:00 2001 From: John Johansen Date: Tue, 28 Jul 2026 13:14:49 -0700 Subject: apparmor: fix auditing of mount binary data AppArmor only mediates non-binary mount data, and should only audit the mount data if it is non-binary. Signed-off-by: John Johansen --- security/apparmor/mount.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'security') diff --git a/security/apparmor/mount.c b/security/apparmor/mount.c index 8402d29ad524..537d22eb0303 100644 --- a/security/apparmor/mount.c +++ b/security/apparmor/mount.c @@ -345,8 +345,8 @@ static int match_mnt_path_str(const struct cred *subj_cred, audit: return audit_mount(subj_cred, profile, OP_MOUNT, mntpnt, devname, - type, NULL, - flags, data, AA_MAY_MOUNT, &perms, info, error); + type, NULL, flags, !binary ? data : NULL, + AA_MAY_MOUNT, &perms, info, error); } /** -- cgit