From caf92e4609220505246aee57872395f02b46cbb9 Mon Sep 17 00:00:00 2001
From: Darik Horn <dajhorn@vanadac.com>
Date: Fri, 11 Jul 2014 18:53:52 -0400
Subject: [PATCH] Add TUN devices to the apparmor profile.

Allow softetherd read-write access to /dev/net/tun and /dev/tun.
---
 debian/apparmor/usr.sbin.softetherd | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/debian/apparmor/usr.sbin.softetherd b/debian/apparmor/usr.sbin.softetherd
index d6f56242..09267e6a 100644
--- a/debian/apparmor/usr.sbin.softetherd
+++ b/debian/apparmor/usr.sbin.softetherd
@@ -30,4 +30,7 @@
 	@{PROC}/sys/kernel/osrelease r,
 	@{PROC}/sys/kernel/threads-max rw,
 	@{PROC}/sys/net/ipv4/conf/all/arp_filter rw,
+
+	/dev/net/tun rw,
+	/dev/tun rw,
 }