From c0bab81e458c5d20d63d7f8a6194b9245cedc322 Mon Sep 17 00:00:00 2001
From: Alexandre Pujol <alexandre@pujol.io>
Date: Wed, 6 Dec 2023 20:03:28 +0000
Subject: [PATCH] feat(profile): add some network deps profile.

---
 apparmor.d/groups/network/netplan.script | 20 ++++++++++++++++++++
 apparmor.d/groups/network/nm-online      | 17 +++++++++++++++++
 dists/flags/main.flags                   |  4 ++++
 3 files changed, 41 insertions(+)
 create mode 100644 apparmor.d/groups/network/netplan.script
 create mode 100644 apparmor.d/groups/network/nm-online

diff --git a/apparmor.d/groups/network/netplan.script b/apparmor.d/groups/network/netplan.script
new file mode 100644
index 00000000..e72e78c1
--- /dev/null
+++ b/apparmor.d/groups/network/netplan.script
@@ -0,0 +1,20 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2023 Alexandre Pujol <alexandre@pujol.io>
+# SPDX-License-Identifier: GPL-2.0-only
+
+abi <abi/3.0>,
+
+include <tunables/global>
+
+@{exec_path} = /usr/share/netplan/netplan.script
+profile netplan.script @{exec_path} {
+  include <abstractions/base>
+
+  @{exec_path} mr,
+
+  @{lib}exec/netplan/generate rix,
+
+  /usr/share/netplan/{,**} r,
+
+  include if exists <local/netplan.script>
+}
\ No newline at end of file
diff --git a/apparmor.d/groups/network/nm-online b/apparmor.d/groups/network/nm-online
new file mode 100644
index 00000000..b80628b3
--- /dev/null
+++ b/apparmor.d/groups/network/nm-online
@@ -0,0 +1,17 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2023 Alexandre Pujol <alexandre@pujol.io>
+# SPDX-License-Identifier: GPL-2.0-only
+
+abi <abi/3.0>,
+
+include <tunables/global>
+
+@{exec_path} = @{bin}/nm-online
+profile nm-online @{exec_path} {
+  include <abstractions/base>
+  include <abstractions/dbus-strict>
+
+  @{exec_path} mr,
+
+  include if exists <local/nm-online>
+}
\ No newline at end of file
diff --git a/dists/flags/main.flags b/dists/flags/main.flags
index 3cd5af3b..c9fd1292 100644
--- a/dists/flags/main.flags
+++ b/dists/flags/main.flags
@@ -33,6 +33,9 @@ apport complain
 at-spi-bus-launcher attach_disconnected,complain
 at-spi2-registryd attach_disconnected,complain
 atd complain
+netplan complain
+netplan.script complain
+WebKitNetworkProcess attach_disconnected,complain
 atril-previewer complain
 auditctl attach_disconnected,complain
 auditd attach_disconnected,complain
@@ -235,6 +238,7 @@ needrestart attach_disconnected,complain
 needrestart-iucode-scan-versions complain
 networkctl attach_disconnected,complain
 networkd-dispatcher complain
+nm-online complain
 nm-openvpn-service-openvpn-helper complain
 nmap complain
 nmcli complain