update profiles for apparmor3

apparmor.d/ifup

@@ -9,13 +9,13 @@
 #
 # ------------------------------------------------------------------
 
-#abi <abi/3.0>,
+abi <abi/3.0>,
 
-#include <tunables/global>
+include <tunables/global>
 
 @{exec_path} = /{usr/,}sbin/{ifup,ifdown,ifquery}
 profile ifup @{exec_path} {
-  #include <abstractions/base>
+  include <abstractions/base>
 
   # To be able to manage network interfaces.
   capability net_admin,
@@ -23,6 +23,8 @@ profile ifup @{exec_path} {
   # Needed?
   audit deny capability sys_module,
 
+  network netlink raw,
+
   @{exec_path} mr,
 
   /{usr/,}bin/{,ba,da}sh rix,
@@ -46,7 +48,7 @@ profile ifup @{exec_path} {
 
 
   profile run-parts {
-    #include <abstractions/base>
+    include <abstractions/base>
 
     /{usr/,}bin/run-parts mr,
 
@@ -85,5 +87,5 @@ profile ifup @{exec_path} {
 
   }
 
-  #include if exists <local/ifup>
+  include if exists <local/ifup>
 }