Skip to content

Commit

Permalink
AppArmor: Explicitly allow netlink raw socket for Supervisor on stable (
Browse files Browse the repository at this point in the history
#372)

Apply #370 to stable as well.
  • Loading branch information
agners authored Apr 30, 2024
1 parent 0c7f53d commit fa255b8
Showing 1 changed file with 6 additions and 2 deletions.
8 changes: 6 additions & 2 deletions apparmor_stable.txt
Original file line number Diff line number Diff line change
Expand Up @@ -4,8 +4,12 @@ profile hassio-supervisor flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
#include <abstractions/python>

network,
deny network raw,
network unix stream,
network inet stream,
network inet6 stream,
network inet dgram,
network inet6 dgram,
network netlink raw,

signal (send) set=(kill,term,int,hup,cont),

Expand Down

0 comments on commit fa255b8

Please sign in to comment.