From f717ea7383ea32abde752af3a88dd1bf87709a25 Mon Sep 17 00:00:00 2001
From: Alexandre Pujol <alexandre@pujol.io>
Date: Mon, 26 May 2025 01:01:08 +0200
Subject: [PATCH] feat(aa): add a mount flag.

---
 pkg/aa/mount.go | 2 +-
 pkg/aa/util.go  | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkg/aa/mount.go b/pkg/aa/mount.go
index bbf66b577..72719414d 100644
--- a/pkg/aa/mount.go
+++ b/pkg/aa/mount.go
@@ -29,7 +29,7 @@ func init() {
 			"ro", "rw", "acl", "async", "atime", "bind", "dev", "diratime",
 			"dirsync", "exec", "iversion", "loud", "mand", "move", "noacl",
 			"noatime", "nodev", "nodiratime", "noexec", "noiversion", "nomand",
-			"norelatime", "nosuid", "nouser", "private", "rbind", "relatime",
+			"norelatime", "nosuid", "nosymfollow", "nouser", "private", "rbind", "relatime",
 			"remount", "rprivate", "rshared", "rslave", "runbindable", "shared",
 			"silent", "slave", "strictatime", "suid", "sync", "unbindable",
 			"user", "verbose",
diff --git a/pkg/aa/util.go b/pkg/aa/util.go
index 485478fef..5a7049d69 100644
--- a/pkg/aa/util.go
+++ b/pkg/aa/util.go
@@ -182,7 +182,7 @@ func toValues(kind Kind, key string, input string) ([]string, error) {
 			continue
 		}
 		if !slices.Contains(req, res[idx]) {
-			return nil, fmt.Errorf("unrecognized %s: %s", key, res[idx])
+			return nil, fmt.Errorf("unrecognized %s for rule %s: %s", key, kind, res[idx])
 		}
 	}
 	slices.SortFunc(res, func(i, j string) int {