feat(profiles): general update.

apparmor.d/groups/virt/docker-proxy

@@ -0,0 +1,22 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2023 Alexandre Pujol <alexandre@pujol.io>
+# SPDX-License-Identifier: GPL-2.0-only
+
+abi <abi/3.0>,
+
+include <tunables/global>
+
+@{exec_path} = /{usr/,}bin/docker-proxy
+profile docker-proxy @{exec_path} {
+  include <abstractions/base>
+
+  capability net_admin,
+
+  @{exec_path} mr,
+
+  @{sys}/kernel/mm/transparent_hugepage/hpage_pmd_size r,
+  
+  @{PROC}/sys/net/core/somaxconn r,
+
+  include if exists <local/docker-proxy>
+}

apparmor.d/groups/virt/dockerd

@@ -57,6 +57,7 @@ profile dockerd @{exec_path} flags=(attach_disconnected) {
   /{usr/,}{s,}bin/xtables-nft-multi   rix,
   /{usr/,}bin/containerd              rPx,
   /{usr/,}bin/docker-init             rix,
+  /{usr/,}bin/docker-proxy            rPx,
   /{usr/,}bin/kmod                    rPx,
   /{usr/,}bin/ps                      rPx,
   /{usr/,}bin/unpigz                  rix,