1
There is no need to go throught the whole state machine for unreachable
2
dentries; they will never match.
4
Index: b/security/apparmor/main.c
5
===================================================================
6
--- a/security/apparmor/main.c
7
+++ b/security/apparmor/main.c
8
@@ -172,6 +172,14 @@ static char *aa_get_name(struct dentry *
10
name = d_namespace_path(dentry, mnt, buf, size);
12
+ if (name[0] != '/') {
14
+ * This dentry is not connected to the
15
+ * namespace root -- reject access.
18
+ return ERR_PTR(-ENOENT);