Append the mediation token to the policy/ns_quota mask now that the verbs are enforced, so userspace can tell a kernel that enforces the policyns rule from one that only parses it.
Signed-off-by: Maxime Bélair <[email protected]> --- security/apparmor/apparmorfs.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/security/apparmor/apparmorfs.c b/security/apparmor/apparmorfs.c index cfc6d6f55a6a..27962b51002b 100644 --- a/security/apparmor/apparmorfs.c +++ b/security/apparmor/apparmorfs.c @@ -2689,7 +2689,7 @@ static struct aa_sfs_entry aa_sfs_entry_ns_quota[] = { * Each follow-up that starts enforcing a construct appends its token * (subtree, criu, load_rate, descendants, root, name, mediation). */ - AA_SFS_FILE_STRING("mask", "self children percent local"), + AA_SFS_FILE_STRING("mask", "self children percent local mediation"), { } }; -- 2.51.0
