diff --git a/apparmor.d/groups/network/networkd-dispatcher b/apparmor.d/groups/network/networkd-dispatcher new file mode 100644 index 00000000..0572caee --- /dev/null +++ b/apparmor.d/groups/network/networkd-dispatcher @@ -0,0 +1,26 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2022 Alexandre Pujol +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}bin/networkd-dispatcher +profile networkd-dispatcher @{exec_path} { + include + include + include + include + + @{exec_path} mr, + + /{usr/,}bin/networkctl rPx, + + @{run}/systemd/notify rw, + + owner @{PROC}/@{pid}/fd/ r, + owner @{PROC}/@{pid}/mounts r, + + include if exists +} \ No newline at end of file