wireshark.profile: enable apparmor

2 files changed, 3 insertions, 0 deletions

diff --git a/etc/firejail-default b/etc/firejail-default
index 89190c826..09dc896e6 100644
--- a/etc/firejail-default
+++ b/etc/firejail-default
@@ -127,6 +127,8 @@ network inet6,
 network unix,
 network netlink,
 network raw,
+# needed for wireshark
+network packet,
 
 ##########
 # There is no equivalent in Firejail for filtering signals.
diff --git a/etc/wireshark.profile b/etc/wireshark.profile
index 71405ef71..330f0140e 100644
--- a/etc/wireshark.profile
+++ b/etc/wireshark.profile
@@ -25,6 +25,7 @@ include /etc/firejail/disable-xdg.inc
 
 include /etc/firejail/whitelist-var-common.inc
 
+apparmor
 # caps.drop all
 caps.keep dac_override,net_admin,net_raw
 netfilter