From a84bcec4b5600b0fef28bb196e5150874029f58f Mon Sep 17 00:00:00 2001
From: Christian Boltz <apparmor@cboltz.de>
Date: Thu, 26 Sep 2024 23:43:29 +0200
Subject: [PATCH] ping: allow reading /proc/sys/net/ipv6/conf/all/disable_ipv6

Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1082190

(cherry picked from commit df4d7cb8dac31d0fc15a74edbb451c14a4b94fca,
 without the test update because test-logprof doesn't exist in 3.x yet)
---
 profiles/apparmor.d/bin.ping | 1 +
 1 file changed, 1 insertion(+)

diff --git a/profiles/apparmor.d/bin.ping b/profiles/apparmor.d/bin.ping
index 149b802d6..2efd37f33 100644
--- a/profiles/apparmor.d/bin.ping
+++ b/profiles/apparmor.d/bin.ping
@@ -24,6 +24,7 @@ profile ping /{usr/,}bin/{,iputils-}ping {
 
   /{,usr/}bin/{,iputils-}ping mixr,
   /etc/modules.conf r,
+  @{PROC}/sys/net/ipv6/conf/all/disable_ipv6 r,
 
   # Site-specific additions and overrides. See local/README for details.
   include if exists <local/bin.ping>