- --- a/profiles/apparmor.d/usr.sbin.dnsmasq
- +++ b/profiles/apparmor.d/usr.sbin.dnsmasq
- @@ -18,6 +18,7 @@ profile dnsmasq /usr/{bin,sbin}/dnsmasq
- include <abstractions/base>
- include <abstractions/dbus>
- include <abstractions/nameservice>
- + include <abstractions/user-tmp>
-
- capability chown,
- capability net_bind_service,
- @@ -38,6 +39,8 @@ profile dnsmasq /usr/{bin,sbin}/dnsmasq
-
- @{PROC}/@{pid}/fd/ r,
-
- + /tmp/** r,
- +
- /etc/dnsmasq.conf r,
- /etc/dnsmasq.d/ r,
- /etc/dnsmasq.d/* r,
|