From 9877075a4b23cdbfe6ec4b5ed9e08ce70d409759 Mon Sep 17 00:00:00 2001 From: Christian Boltz Date: Sat, 6 Jun 2015 14:29:44 +0200 Subject: [PATCH] Let aa-complain delete the disable symlink aa-complain is part of the enforce/complain/disable triple. Therefore I expect it to actually load a profile in complain mode. To do this, it has to delete the 'disable' symlink, but set_complain() in aa.py didn't do this (and therefore kept the profile disabled). Acked-by: Kshitij Gupta --- utils/apparmor/aa.py | 1 + 1 file changed, 1 insertion(+) diff --git a/utils/apparmor/aa.py b/utils/apparmor/aa.py index 58dea2289..ca9427b7e 100644 --- a/utils/apparmor/aa.py +++ b/utils/apparmor/aa.py @@ -284,6 +284,7 @@ def set_complain(filename, program): aaui.UI_Info(_('Setting %s to complain mode.') % (filename if program is None else program)) # a force-complain symlink is more packaging-friendly, but breaks caching # create_symlink('force-complain', filename) + delete_symlink('disable', filename) change_profile_flags(filename, program, 'complain', True) def set_enforce(filename, program):