Skip to content

utils: Ignore/skip disabled profiles

Christian Boltz requested to merge cboltz/apparmor:cboltz-skip-disabled into master

This is needed to avoid a "Conflicting profiles" error if there are two profiles for an application, with one of them disabled.

This is not a theoretical usecase - for example, apparmor.d ships some profiles that replace our "userns+unconfined" profiles. These profiles use a different filename, and apparmor.d also creates a disable symlink for the "userns+unconfined" profile it replaces.

I propose this patch for 4.0 and master.

Merge request reports