diff --git a/utils/aa-unconfined b/utils/aa-unconfined index c834bcd20..48915b8ce 100755 --- a/utils/aa-unconfined +++ b/utils/aa-unconfined @@ -126,7 +126,7 @@ def read_proc_current(filename): with open_file_read(filename) as current: for line in current: line = line.strip() - if line.endswith(' (complain)', 1) or line.endswith(' (enforce)', 1) or line.endswith(' (kill)', 1): # enforce at least one char as profile name + if line.endswith(' (complain)', 1) or line.endswith(' (enforce)', 1) or line.endswith(' (kill)', 1) or line.endswith(' (user)', 1): # enforce at least one char as profile name # intentionally not checking for '(unconfined)', because $binary confined by $profile (unconfined) would look very confusing attr = line except OSError: