From 790fa8f10532b37b1fd599bb4ab52ece2d65526e Mon Sep 17 00:00:00 2001
From: Sam <sam.rossoff@gremlin.com>
Date: Tue, 25 Nov 2025 11:16:36 -0800
Subject: [PATCH] [Apparmor] Include net_raw capability

---
 gremlin/agent_apparmor.profile | 1 +
 1 file changed, 1 insertion(+)

diff --git a/gremlin/agent_apparmor.profile b/gremlin/agent_apparmor.profile
index 2ba9ae6..4c5003d 100644
--- a/gremlin/agent_apparmor.profile
+++ b/gremlin/agent_apparmor.profile
@@ -55,6 +55,7 @@ profile gremlin-agent flags=(attach_disconnected,mediate_deleted) {
   # Needed for Gremlin Service Discovery and executing a certificate expiry experiment
   capability dac_read_search,
   capability sys_ptrace,
+  capability net_raw,
 
   # Needed for Gremlin Process Exhaustion
   capability sys_resource