1 files changed, 4 insertions, 0 deletions

diff --git a/security/apparmor/domain.c b/security/apparmor/domain.c
index 6327685c101e..18c88d06e881 100644
--- a/security/apparmor/domain.c
+++ b/security/apparmor/domain.c
@@ -360,6 +360,10 @@ int apparmor_bprm_set_creds(struct linux_binprm *bprm)
         if (bprm->cred_prepared)
                 return 0;
 
+        /* XXX: no_new_privs is not usable with AppArmor yet */
+        if (bprm->unsafe & LSM_UNSAFE_NO_NEW_PRIVS)
+                return -EPERM;
+
         cxt = bprm->cred->security;
         BUG_ON(!cxt);