From ddb39bffe9b5d6aedee0f474eb2b8da4eef244bd Mon Sep 17 00:00:00 2001
From: Sadie Powell
Date: Thu, 23 Jul 2026 10:06:25 +0100
Subject: Add network connection filtering to the AppArmor profile.

---
 make/template/apparmor | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/make/template/apparmor b/make/template/apparmor
index 5c41fd247..a7329f7ba 100644
--- a/make/template/apparmor
+++ b/make/template/apparmor
@@ -31,6 +31,16 @@ profile inspircd @BINARY_DIR@/inspircd {
 	capability setuid,
 	capability sys_resource,
 
+	# Required for client connections:
+	network inet stream tcp,
+	network inet6 stream tcp,
+	network inet stream sctp,
+	network inet6 stream sctp,
+
+	# Required for DNS lookups:
+	network inet dgram udp,
+	network inet6 dgram udp,
+
 	@BINARY_DIR@/inspircd ixr,
 	@CONFIG_DIR@/** rw,
 	@DATA_DIR@/** rw,
-- 
cgit v1.3.1-10-gc9f91