intrigeri: > FWIW, this is now mentioned in the manpage that documents the policy > language: apparmor.d(5)
Maybe I have not read the manual thoroughly enough, but I have not found mentions of features that does not work in Debian yet. Maybe such notice should be placed in "Network Rules" section of the manual? Or in "KNOWN BUGS"? So that newcomers will not be misguided (like me). Okay, it's my bad that I have not checked explicitly if it works. But IMO there is an issue with documentation if you can't understand from it what is supposed to be working and what is not. By the way, ping under apparmor fails with "ping: socket: Operation not permitted", while wget or curl works pretty well under the same profile. Don't know if it is supposed to be like it. Heenec
0x4B12C0FAA12F367B.asc
Description: application/pgp-keys
