AppArmor profile exchange
#include <tunables/global>
/sbin/dhclient-script flags=(complain) {
#include <abstractions/base>
#include <abstractions/bash>
#include <abstractions/consoles>
#include <abstractions/nameservice>
#include <abstractions/user-tmp>
capability sys_ptrace,
/bin/bash ixr,
/bin/cat ixr,
/bin/chmod ixr,
/bin/dbus-send Px,
/bin/egrep ixr,
/bin/grep ixr,
/bin/mv ixr,
/bin/sed ixr,
/bin/sleep Px,
/bin/uname Px,
/etc/resolv.conf rw,
/etc/resolv.conf.saved.by.dhclient w,
/etc/sysconfig/network/config r,
/etc/sysconfig/network/dhcp r,
/proc/ r,
/proc/*/cmdline r,
/proc/*/mounts r,
/proc/*/stat r,
/proc/meminfo r,
/sbin/dhclient-script mr,
/sbin/ifconfig Px,
/sbin/killall5 ixr,
/sbin/route Px,
/tmp/ w,
/usr/bin/env ixr,
/usr/bin/expr ixr,
}