diff --git a/apparmor.d/profiles-a-f/dig b/apparmor.d/profiles-a-f/dig index bf0b42b6f..e4cf9cfde 100644 --- a/apparmor.d/profiles-a-f/dig +++ b/apparmor.d/profiles-a-f/dig @@ -10,6 +10,7 @@ include @{exec_path} = /{usr/,}bin/dig profile dig @{exec_path} { include + include include include diff --git a/apparmor.d/profiles-g-l/host b/apparmor.d/profiles-g-l/host index a229b4056..46e3eb6d6 100644 --- a/apparmor.d/profiles-g-l/host +++ b/apparmor.d/profiles-g-l/host @@ -8,6 +8,7 @@ include @{exec_path} = /{,usr/}bin/host profile host @{exec_path} { include + include include include diff --git a/apparmor.d/profiles-m-r/nslookup b/apparmor.d/profiles-m-r/nslookup index 71aa765fa..ddf47994b 100644 --- a/apparmor.d/profiles-m-r/nslookup +++ b/apparmor.d/profiles-m-r/nslookup @@ -8,6 +8,7 @@ include @{exec_path} = /{,usr/}bin/nslookup profile nslookup @{exec_path} { include + include include include diff --git a/apparmor.d/profiles-s-z/ss b/apparmor.d/profiles-s-z/ss index ee4c8deac..a1cc20fc4 100644 --- a/apparmor.d/profiles-s-z/ss +++ b/apparmor.d/profiles-s-z/ss @@ -8,6 +8,7 @@ include @{exec_path} = /{,usr/}bin/ss profile ss @{exec_path} { include + include include capability net_admin, @@ -41,5 +42,7 @@ profile ss @{exec_path} { owner @{PROC}/@{pids}/mounts r, @{sys}/fs/cgroup/{,**/} r, + owner /dev/tty[0-9]* rw, + include if exists }