fix(apparmor): Make network rules more strict

Explicitly define allowed network domain.
7 years ago · 11a32e3371
2 changed files with 8 additions and 4 deletions
--- a/security/apparmor/2.12.1/usr.bin.qtox
+++ b/security/apparmor/2.12.1/usr.bin.qtox
@ -38,8 +38,10 @@ profile qtox /usr{,/local}/bin/qtox {
				@@ -38,8 +38,10 @@ profile qtox /usr{,/local}/bin/qtox {

  # Networking

-  network tcp,
-  network udp,
+  network inet udp,
+  network inet6 udp,
+  network inet tcp,
+  network inet6 tcp,

  # DBus

--- a/security/apparmor/2.13.2/usr.bin.qtox
+++ b/security/apparmor/2.13.2/usr.bin.qtox
@ -45,8 +45,10 @@ profile qtox /usr{,/local}/bin/qtox {
				@@ -45,8 +45,10 @@ profile qtox /usr{,/local}/bin/qtox {

  # Networking

-  network tcp,
-  network udp,
+  network inet udp,
+  network inet6 udp,
+  network inet tcp,
+  network inet6 tcp,

  # DBus