Skip to content

aa-unconfined: Improve fallback handling to attr/current

Christian Boltz requested to merge cboltz/apparmor:cboltz-aa-unconfined-fallback into master

If /proc//attr/apparmor/current exists, only read that - instead of falling back to /proc//attr/current if a process is for example unconfined so that read_proc_current returns None.

Fixes: #199 (closed)

I propose this patch for 3.0 and master.

2.13 and older only check /proc/*/attr/current. If we want to change that, we'll need to backport some more commits, or maybe just copy over the latest aa-unconfined.

Edited by Christian Boltz

Merge request reports