feat(profile): general update.

apparmor.d/groups/network/socat

@@ -1,7 +1,7 @@
 # apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
 # Copyright (C) 2024 Nishit Majithia (nishitm)
 # SPDX-License-Identifier: GPL-2.0-only
-# vim: ft=apparmor
 
 abi <abi/3.0>,
 
@@ -10,19 +10,19 @@ include <tunables/global>
 @{exec_path} = @{bin}/socat
 profile socat @{exec_path} {
   include <abstractions/base>
+  include <abstractions/consoles>
   include <abstractions/nameservice-strict>
   include <abstractions/ssl_certs>
-  include <abstractions/consoles>
 
-  capability dac_read_search,
-  capability dac_override,
-  capability net_raw,
-  capability net_admin,
-  capability sys_module,
-  capability sys_admin,
-  capability fsetid,
   capability chown,
+  capability dac_override,
+  capability dac_read_search,
+  capability fsetid,
+  capability net_admin,
   capability net_bind_service,
+  capability net_raw,
+  capability sys_admin,
+  capability sys_module,
   capability sys_resource,
 
   # Allow creation of network sockets and `socat` uses dccp for some
@@ -31,19 +31,13 @@ profile socat @{exec_path} {
 
   @{exec_path} mr,
 
-  # Enale /dev/ptmx access for testsuite
-  # /dev/ptmx rw,
-
-  # TUN/TAP device
-  /dev/net/tun rw,
-
-  # Process-specific access
   @{PROC}/@{pid}/fdinfo/@{int} rw,
-  @{PROC}/@{pid}/stat           r,
+  @{PROC}/@{pid}/stat r,
 
-  # For bi-directional communication between vms and host/hypervisor
-  /dev/vsock r,
+  /dev/net/tun rw,
+  /dev/vsock r,  # For bi-directional communication between vms and host/hypervisor
 
-  # Site-specific additions and overrides. See local/README for details.
   include if exists <local/socat>
 }
+
+# vim:syntax=apparmor