From ca1827ea1207242018ba604c7a789b6beb0992e9 Mon Sep 17 00:00:00 2001
From: Alexandre Pujol <alexandre@pujol.io>
Date: Sun, 7 Sep 2025 23:53:02 +0200
Subject: [PATCH] fix: missing attach_disconnected in parrent profile while
 subprofile was using it.

---
 apparmor.d/groups/utils/su | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/apparmor.d/groups/utils/su b/apparmor.d/groups/utils/su
index 866da3d6a..e5293021c 100644
--- a/apparmor.d/groups/utils/su
+++ b/apparmor.d/groups/utils/su
@@ -8,7 +8,7 @@ abi <abi/4.0>,
 include <tunables/global>
 
 @{exec_path} = @{bin}/su
-profile su @{exec_path} {
+profile su @{exec_path} flags=(attach_disconnected) {
   include <abstractions/base>
   include <abstractions/app-launcher-root>
   include <abstractions/app/sudo>