From 5f0fcfcae98f97ee9c6e8cfa2c115c663a7badd5 Mon Sep 17 00:00:00 2001
From: Eduardo Barretto <eduardo.barretto@canonical.com>
Date: Thu, 7 Nov 2024 19:03:30 +0100
Subject: [PATCH] profiles: mbsync: make use of nameservice-strict abstraction

Signed-off-by: Eduardo Barretto <eduardo.barretto@canonical.com>
---
 profiles/apparmor.d/mbsync | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/profiles/apparmor.d/mbsync b/profiles/apparmor.d/mbsync
index 697e0f6cb..7aa667e2e 100644
--- a/profiles/apparmor.d/mbsync
+++ b/profiles/apparmor.d/mbsync
@@ -15,6 +15,7 @@ include <tunables/global>
 
 profile mbsync /usr/bin/mbsync {
   include <abstractions/base>
+  include <abstractions/nameservice-strict>
   include <abstractions/ssl_certs>
 
   network inet dgram,
@@ -23,12 +24,7 @@ profile mbsync /usr/bin/mbsync {
   network inet6 stream,
   network netlink raw,
 
-  @{etc_ro}/gai.conf r,
-  @{etc_ro}/host.conf r,
-  @{etc_ro}/hosts r,
-  @{etc_ro}/nsswitch.conf r,
   @{etc_ro}/ssl/openssl.cnf r,
-  @{run}/systemd/resolve/stub-resolv.conf r,
   /usr/bin/mbsync r,
   owner @{HOME}/.mbsyncrc r,
   owner @{HOME}/Mail/**/ r,