From 861be3904b77061b5660a585211d7640e3976cbe Mon Sep 17 00:00:00 2001
From: Alex Murray <alex.murray@canonical.com>
Date: Tue, 4 Feb 2025 11:26:24 +1030
Subject: [PATCH] profiles/apparmor.d/tinyproxy: use nameservice-strict
 abstraction

tinyproxy does not need all of nameservice, nameservice-strict is
sufficient. Thanks to @cboltz for the suggestion.

Signed-off-by: Alex Murray <alex.murray@canonical.com>
---
 profiles/apparmor.d/tinyproxy | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/profiles/apparmor.d/tinyproxy b/profiles/apparmor.d/tinyproxy
index b3c40849a..d0d551f03 100644
--- a/profiles/apparmor.d/tinyproxy
+++ b/profiles/apparmor.d/tinyproxy
@@ -16,7 +16,7 @@ include <tunables/global>
 
 profile tinyproxy /usr/bin/tinyproxy {
   include <abstractions/base>
-  include <abstractions/nameservice>
+  include <abstractions/nameservice-strict>
 
   # to provide flexibility, when run as root tinyproxy may need to read files
   # owned by other users