This is because boot params are processed before apparmor is fully initialized and policy_view_capable() will oops because the rootns is not setup.
We should by-pass policy_view_capable() for params being set at boot.
This is because boot params are processed before apparmor is fully initialized and policy_ view_capable( ) will oops because the rootns is not setup.
We should by-pass policy_ view_capable( ) for params being set at boot.