=== modified file 'debian/control'
--- debian/control	2014-04-30 14:59:42 +0000
+++ debian/control	2014-06-24 22:25:16 +0000
@@ -16,7 +16,8 @@
                libgoogle-glog-dev,
                qtdeclarative5-dev,
                qtdeclarative5-dev-tools,
-               qtdeclarative5-test-plugin
+               qtdeclarative5-test-plugin,
+               dh-apparmor
 Maintainer: Manuel de la Peña <manuel.delapena@canonical.com>
 Standards-Version: 3.9.5
 Homepage: https://launchpad.net/ubuntu-system-image

=== modified file 'debian/rules'
--- debian/rules	2014-04-09 11:31:21 +0000
+++ debian/rules	2014-06-24 22:25:16 +0000
@@ -26,6 +26,10 @@
 override_dh_auto_configure:
 	dh_auto_configure -- -DCMAKE_INSTALL_LIBEXECDIR=/usr/lib/$(DEB_HOST_MULTIARCH)
 
+override_dh_installdeb:
+	dh_apparmor --profile-name=usr.bin.ubuntu-download-manager -pubuntu-download-manager
+	dh_installdeb
+
 dh_auto_install:
 	rm -f debian/tmp/usr/lib/*.so
 	dh_install --fail-missing

=== added file 'debian/ubuntu-download-manager.dirs'
--- debian/ubuntu-download-manager.dirs	1970-01-01 00:00:00 +0000
+++ debian/ubuntu-download-manager.dirs	2014-06-24 22:25:16 +0000
@@ -0,0 +1,1 @@
+etc/apparmor.d

=== modified file 'debian/ubuntu-download-manager.install'
--- debian/ubuntu-download-manager.install	2014-04-21 14:14:33 +0000
+++ debian/ubuntu-download-manager.install	2014-06-24 22:25:16 +0000
@@ -2,3 +2,4 @@
 usr/share/dbus-1/services/ubuntu-download-manager.service
 usr/share/dbus-1/system-services/com.canonical.applications.Downloader.service
 etc/dbus-1/system.d/com.canonical.applications.Downloader.conf
+debian/usr.bin.ubuntu-download-manager etc/apparmor.d

=== added file 'debian/usr.bin.ubuntu-download-manager'
--- debian/usr.bin.ubuntu-download-manager	1970-01-01 00:00:00 +0000
+++ debian/usr.bin.ubuntu-download-manager	2014-06-24 22:25:16 +0000
@@ -0,0 +1,16 @@
+#include <tunables/global>
+
+# Permissive profile to have profile name to limit access to ofonod (LP: #1296415)
+/usr/bin/ubuntu-download-manager (attach_disconnected) {
+  capability,
+  mount,
+  remount,
+  umount,
+  network,
+  /   rwkl,
+  /** rwlkm,
+  /** pix,
+  dbus,
+  signal,
+  ptrace,
+}