diff --git a/security/apparmor/net.c b/security/apparmor/net.c index c8d12e3f1d0e..34503c8036a8 100644 --- a/security/apparmor/net.c +++ b/security/apparmor/net.c @@ -173,9 +173,8 @@ int aa_profile_af_perm(struct aa_profile *profile, AA_BUG(family >= AF_MAX); AA_BUG(type < 0 || type >= SOCK_MAX); + AA_BUG(profile_unconfined(profile)); - if (profile_unconfined(profile)) - return 0; state = RULE_MEDIATES(rules, AA_CLASS_NET); if (state) { buffer[0] = cpu_to_be16(family);