apparmor: remove redundant perms.allow MAY_EXEC bitflag set
authorRyan Lee <ryan.lee@canonical.com>
Mon, 23 Jun 2025 21:58:00 +0000 (14:58 -0700)
committerJohn Johansen <john.johansen@canonical.com>
Sun, 20 Jul 2025 09:19:28 +0000 (02:19 -0700)
commit4ce7d3cf5ad846a8843f8afc78de2a8309f74f12
tree1d2de151ecaddc8baf00effa684fc8b9be8cb39c
parentda0edababafa444e638a0be6dd2feef0a9e529e2
apparmor: remove redundant perms.allow MAY_EXEC bitflag set

This section of profile_transition that occurs after x_to_label only
happens if perms.allow already has the MAY_EXEC bit set, so we don't need
to set it again.

Fixes: 16916b17b4f8 ("apparmor: force auditing of conflicting attachment execs from confined")
Signed-off-by: Ryan Lee <ryan.lee@canonical.com>
Signed-off-by: John Johansen <john.johansen@canonical.com>
security/apparmor/domain.c