Andrei Vagin spotted a missing change to apparmor:apparmor_fs_context_parse_param() needs to return -ENOPARAM, not 0.David