tag ccaf521aa19835eba09269eac7386de043a4ff58
tagger John Johansen <john.johansen@canonical.com> Sun Jan 07 05:47:15 2018 -0800
object 5b9f57cf47b87f07210875d6a24776b4496b818d

- fix regression in mount mediation when feature set is pinned

commit 5b9f57cf47b87f07210875d6a24776b4496b818d
author John Johansen <john.johansen@canonical.com> Thu Dec 07 00:28:27 2017 -0800
committer John Johansen <john.johansen@canonical.com> Fri Jan 05 15:07:42 2018 -0800
tree b3c7dc808d1a67ca1bd9379c532af6e1a67b643f
parent 30a7acd573899fd8b8ac39236eff6468b195ac7d

apparmor: fix regression in mount mediation when feature set is pinned

When the mount code was refactored for Labels it was not correctly
updated to check whether policy supported mediation of the mount
class.  This causes a regression when the kernel feature set is
reported as supporting mount and policy is pinned to a feature set
that does not support mount mediation.

BugLink: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=882697#41
Fixes: 2ea3ffb7782a ("apparmor: add mount mediation")
Reported-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Cc: Stable <stable@vger.kernel.org>
Signed-off-by: John Johansen <john.johansen@canonical.com>