Merge lp:~sdeziel/apparmor-profiles/unbound-chown into lp:apparmor-profiles

[Simon Déziel]

[Christian Boltz (cboltz)]

Thanks for the patch!

Merged into r169.

review: Approve

=== modified file 'ubuntu/16.04/usr.sbin.unbound'
--- ubuntu/16.04/usr.sbin.unbound	2016-04-13 12:47:26 +0000
+++ ubuntu/16.04/usr.sbin.unbound	2016-05-29 19:19:27 +0000
@@ -7,6 +7,9 @@
   #include <abstractions/nameservice>
   #include <abstractions/openssl>
 
+  # needlessly chown'ing the PID
+  deny capability chown,
+
   capability net_bind_service,
   capability setgid,
   capability setuid,
 
=== modified file 'ubuntu/16.10/usr.sbin.unbound'
--- ubuntu/16.10/usr.sbin.unbound	2016-04-22 22:38:30 +0000
+++ ubuntu/16.10/usr.sbin.unbound	2016-05-29 19:19:27 +0000
@@ -7,6 +7,9 @@
   #include <abstractions/nameservice>
   #include <abstractions/openssl>
 
+  # needlessly chown'ing the PID
+  deny capability chown,
+
   capability net_bind_service,
   capability setgid,
   capability setuid,