From dc4c3cd48bf8169584bbc8b606ed0812d1dabf93 Mon Sep 17 00:00:00 2001 From: Christian Brauner Date: Wed, 16 Jun 2021 15:03:35 +0200 Subject: [PATCH] apparmor: actually enable suspend for AppArmor The original patches didn't pass down the "suspend" boolean into write_aa_policy() and so suspend never really happened. Pass it down. Signed-off-by: Christian Brauner --- criu/apparmor.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/criu/apparmor.c b/criu/apparmor.c index 85005ed41..8c999b3f5 100644 --- a/criu/apparmor.c +++ b/criu/apparmor.c @@ -585,7 +585,7 @@ static int do_suspend(bool suspend) AaNamespace *ns = namespaces[i]; char path[PATH_MAX] = AA_SECURITYFS_PATH "/policy"; - if (write_aa_policy(ns, path, strlen(path), opts.lsm_profile, false) < 0) + if (write_aa_policy(ns, path, strlen(path), opts.lsm_profile, suspend) < 0) return -1; }