fix(apparmor): Make network rules more strict

Explicitly define allowed network domain.
qTox · Mar 25, 2019 · 11a32e3 · 11a32e3
1 parent 4d9cc72
commit 11a32e3
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 4 deletions.
diff --git a/security/apparmor/2.12.1/usr.bin.qtox b/security/apparmor/2.12.1/usr.bin.qtox
@@ -38,8 +38,10 @@ profile qtox /usr{,/local}/bin/qtox {
 
   # Networking
 
-  network tcp,
-  network udp,
+  network inet udp,
+  network inet6 udp,
+  network inet tcp,
+  network inet6 tcp,
 
   # DBus
 

diff --git a/security/apparmor/2.13.2/usr.bin.qtox b/security/apparmor/2.13.2/usr.bin.qtox
@@ -45,8 +45,10 @@ profile qtox /usr{,/local}/bin/qtox {
 
   # Networking
 
-  network tcp,
-  network udp,
+  network inet udp,
+  network inet6 udp,
+  network inet tcp,
+  network inet6 tcp,
 
   # DBus