add network capability

photoprism/apparmor.txt

@@ -2,17 +2,25 @@
 
 profile photoprism flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
-  
+
   capability,
   file,
+  signal,
   mount,
   umount,
   remount,
+  network udp,
+  network tcp,
+  network dgram,
+  network stream,
+  network inet,
+  network inet6,
+  network netlink raw,
 
   capability setgid,
   capability setuid,
-  capability sys_admin, 
-  capability dac_read_search, 
+  capability sys_admin,
+  capability dac_read_search,
   capability dac_override,
   capability sys_rawio,
 
@@ -28,7 +36,7 @@ profile photoprism flags=(attach_disconnected,mediate_deleted) {
   /init rix,
   /var/run/** mrwkl,
   /var/run/ mrwkl,
-  /dev/i2c-1 mrwkl, 
+  /dev/i2c-1 mrwkl,
   # Files required
   /dev/sda1 mrwkl,
   /dev/sdb1 mrwkl,
@@ -36,13 +44,13 @@ profile photoprism flags=(attach_disconnected,mediate_deleted) {
   /dev/ttyUSB0 mrwkl,
   /dev/* mrwkl,
   /tmp/** mrkwl,
-  
+
   # Data access
-  /data/** rw, 
+  /data/** rw,
 
   # suppress ptrace denials when using 'docker ps' or using 'ps' inside a container
   ptrace (trace,read) peer=docker-default,
- 
+
   # docker daemon confinement requires explict allow rule for signal
   signal (receive) set=(kill,term) peer=/usr/bin/docker,