apparmor: fix auditing of mount binary data

AppArmor only mediates non-binary mount data, and should only
audit the mount data if it is non-binary.

Signed-off-by: John Johansen <john.johansen@canonical.com>
This commit is contained in:
John Johansen
2026-08-10 22:49:42 -07:00
parent 97dd3f51bf
commit b9f2181b90
+2 -2
View File
@@ -345,8 +345,8 @@ static int match_mnt_path_str(const struct cred *subj_cred,
audit:
return audit_mount(subj_cred, profile, OP_MOUNT, mntpnt, devname,
type, NULL,
flags, data, AA_MAY_MOUNT, &perms, info, error);
type, NULL, flags, !binary ? data : NULL,
AA_MAY_MOUNT, &perms, info, error);
}
/**