felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Host: allow netlink raw

Browse source 
Querying a DNS server using it's hostname results in an apparmor denial: `host google.com dns.google.com`

`apparmor="DENIED" operation="create" class="net" profile="host" pid=00000 comm="host" family="netlink" sock_type="raw" protocol=0 requested_mask="create" denied_mask="create"`
This commit is contained in:
doublez13 2025-08-08 12:35:52 -06:00 • committed by GitHub
parent d57b867696
commit e1dc64c13a
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 1 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
apparmor.d/profiles-g-l/host
View file

@ -18,6 +18,7 @@ profile host @{exec_path} {
network inet6 dgram, network inet6 dgram,
network inet stream, network inet stream,
network inet6 stream, network inet6 stream,
network netlink raw,
@{exec_path} mr, @{exec_path} mr,