diff --git a/profiles/apparmor.d/abstractions/nameservice b/profiles/apparmor.d/abstractions/nameservice index 27dc2ac9a..6474abaa3 100644 --- a/profiles/apparmor.d/abstractions/nameservice +++ b/profiles/apparmor.d/abstractions/nameservice @@ -33,14 +33,10 @@ /var/lib/sss/pipes/nss rw, /etc/resolv.conf r, - # on systems using resolvconf, /etc/resolv.conf is a symlink to - # /{,var/}run/resolvconf/resolv.conf and a file sometimes referenced in - # /etc/resolvconf/run/resolv.conf - /{,var/}run/resolvconf/resolv.conf r, + # On systems where /etc/resolv.conf is managed programmatically, it is + # a symlink to /{,var/}run/(whatever program is managing it)/resolv.conf. + /{,var/}run/{resolvconf,NetworkManager,systemd/resolve,connman}/resolv.conf r, /etc/resolvconf/run/resolv.conf r, - # on systems using systemd's networkd, /etc/resolv.conf is a symlink to - # /run/systemd/resolve/resolv.conf - /{,var/}run/systemd/resolve/resolv.conf r, /etc/samba/lmhosts r, /etc/services r,