From 0125d04924dc4e7c8c68a3c99a9de4bb362fda9c Mon Sep 17 00:00:00 2001
From: Christian Boltz <apparmor@cboltz.de>
Date: Wed, 18 May 2016 21:18:34 +0200
Subject: [PATCH] allow inet6 in ping profile

The latest iputils merged ping and ping6 into a single binary that does
both IPv4 and IPv6 pings (by default, it really does both).
This means we need to allow network inet6 raw in the ping profile.

References: https://bugzilla.opensuse.org/show_bug.cgi?id=980596
            (contains more details and example output)


Acked-by: Steve Beattie <steve@nxnw.org> for trunk, 2.10 and 2.9
---
 profiles/apparmor.d/bin.ping | 1 +
 1 file changed, 1 insertion(+)

diff --git a/profiles/apparmor.d/bin.ping b/profiles/apparmor.d/bin.ping
index 5eaf6941d..81dd3cb92 100644
--- a/profiles/apparmor.d/bin.ping
+++ b/profiles/apparmor.d/bin.ping
@@ -18,6 +18,7 @@
   capability net_raw,
   capability setuid,
   network inet raw,
+  network inet6 raw,
 
   /{,usr/}bin/ping mixr,
   /etc/modules.conf r,