feat(profile): general update.

apparmor.d/profiles-g-l/ifconfig

@@ -1,5 +1,6 @@
 # apparmor.d - Full set of apparmor profiles
 # Copyright (C) 2019-2021 Mikhail Morfikov
+# Copyright (C) 2021-2023 Alexandre Pujol <alexandre@pujol.io>
 # SPDX-License-Identifier: GPL-2.0-only
 
 abi <abi/3.0>,
@@ -12,23 +13,20 @@ profile ifconfig @{exec_path} {
   include <abstractions/consoles>
   include <abstractions/nameservice-strict>
 
-  # To be able to manage network interfaces.
   capability net_admin,
-
-  # Needed?
-  audit deny capability sys_module,
+  capability sys_module,
 
   network inet dgram,
   network inet6 dgram,
 
   @{exec_path} mr,
 
-  @{PROC}/net/dev r,
-  @{PROC}/net/if_inet6 r,
+  /etc/networks r,
+
   @{PROC}/@{pid}/net/dev r,
   @{PROC}/@{pid}/net/if_inet6 r,
-
-  /etc/networks r,
+  @{PROC}/net/dev r,
+  @{PROC}/net/if_inet6 r,
 
   include if exists <local/ifconfig>
 }