apparmor: Fix move_mount mediation by detecting if source is detached
[linux-2.6-microblaze.git] / security / apparmor / apparmorfs.c
index 38650e5..2d9f2a4 100644 (file)
@@ -2373,6 +2373,7 @@ static struct aa_sfs_entry aa_sfs_entry_policy[] = {
 
 static struct aa_sfs_entry aa_sfs_entry_mount[] = {
        AA_SFS_FILE_STRING("mask", "mount umount pivot_root"),
+       AA_SFS_FILE_STRING("move_mount", "detached"),
        { }
 };