diff --git a/profiles/apparmor/profiles/extras/sbin.dhclient b/profiles/apparmor/profiles/extras/sbin.dhclient index 7043d4651..7b15dca3b 100644 --- a/profiles/apparmor/profiles/extras/sbin.dhclient +++ b/profiles/apparmor/profiles/extras/sbin.dhclient @@ -58,14 +58,14 @@ profile dhclient /{usr/,}sbin/dhclient { /usr/lib/{NetworkManager/,}nm-dhcp-helper rix, /var/lib/dhclient/dhclient{6,}.leases* rw, /var/lib/dhcp/dhclient*.leases rw, - /var/lib/dhcp6/dhclient.leases rw, + /var/lib/dhcp{6,}/dhclient.leases rw, /var/lib/NetworkManager/dhclient{6,}-*.conf r, /var/lib/NetworkManager/dhclient{6,}-*.lease rw, /var/log/lastlog r, /var/log/messages r, /var/log/wtmp r, /{,var/}run/dhclient{6,}.pid rw, - /{,var/}run/dhclient{6,}-*.pid rw, + /{,var/}run/dhclient{6,}{-,.}*.pid rw, /var/spool r, /var/spool/mail r, diff --git a/profiles/apparmor/profiles/extras/sbin.dhclient-script b/profiles/apparmor/profiles/extras/sbin.dhclient-script index 637ab8ffc..7b3113525 100644 --- a/profiles/apparmor/profiles/extras/sbin.dhclient-script +++ b/profiles/apparmor/profiles/extras/sbin.dhclient-script @@ -12,13 +12,20 @@ profile dhclient-script /{usr/,}sbin/dhclient-script { include include + /{usr/,}bin/dash rix, /{usr/,}bin/bash rix, /{usr/,}bin/grep rix, /{usr/,}bin/sleep rix, /{usr/,}bin/touch rix, + /{usr/,}bin/run-parts rix, + /{usr/,}bin/logger rix, /dev/.sysconfig/network/** r, /etc/netconfig.d/* mrix, /etc/sysconfig/network/** r, + /etc/dhcp/{**,} r, /{usr/,}sbin/dhclient-script r, /{usr/,}sbin/ip rix, + /{usr/,}sbin/resolvconf rPux, + + include if exists }