• John Johansen's avatar
    apparmor: Fix regression in mount mediation · 157a3537
    John Johansen authored
    commit 2db154b3 ("vfs: syscall: Add move_mount(2) to move mounts around")
    
    introduced a new move_mount(2) system call and a corresponding new LSM
    security_move_mount hook but did not implement this hook for any
    existing LSM. This creates a regression for AppArmor mediation of
    mount. This patch provides a base mapping of the move_mount syscall to
    the existing mount mediation. In the future we may introduce
    additional mediations around the new mount calls.
    
    Fixes: 2db154b3 ("vfs: syscall: Add move_mount(2) to move mounts around")
    CC: stable@vger.kernel.org
    Reported-by: default avatarAndreas Steinmetz <anstein99@googlemail.com>
    Signed-off-by: default avatarJohn Johansen <john.johansen@canonical.com>
    157a3537
mount.c 19.3 KB