From 5173d3177c8ebfb36e69be4516f69e4717a602f3 Mon Sep 17 00:00:00 2001
From: Alexandre Pujol <alexandre@pujol.io>
Date: Sun, 30 Mar 2025 18:32:26 +0200
Subject: [PATCH] fix(profile): qemu: ensure guest addition can shutdown the
 system.

---
 apparmor.d/profiles-m-r/qemu-ga | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/apparmor.d/profiles-m-r/qemu-ga b/apparmor.d/profiles-m-r/qemu-ga
index bc30789dc..461d27c61 100644
--- a/apparmor.d/profiles-m-r/qemu-ga
+++ b/apparmor.d/profiles-m-r/qemu-ga
@@ -30,9 +30,11 @@ profile qemu-ga @{exec_path} {
     include <abstractions/base>
     include <abstractions/app/systemctl>
 
+    capability net_admin,
+
     unix type=stream addr=@@{udbus}/bus/shutdown/system,
 
-    #aa-dbus talk bus=system name=org.freedesktop.login1 label=systemd-logind
+    #aa:dbus talk bus=system name=org.freedesktop.login1 label=systemd-logind
 
     include if exists <local/qemu-ga_systemctl>
   }