AppArmor Profile: Deny internet access

I want to deny the internet permission for some applications. Therefore, I tried first to deny the internet permission for ping, but it doesn't work. Here is the profile of /etc/apparmor.d/bin.ping /{usr/,}bin/ping { #include # block ipv4 acces deny network inet, # ipv6 deny network inet6, # raw socket deny network raw, } But the pinging still happens after restarting apparmor with /etc/init.d/boot.apparmor restart ping google.de PING google.de (64.15.112.99) 56(84) bytes of data. 64 bytes from cache.google.com (64.15.112.99): icmp_seq=1 ttl=57 time=11.8 ms 64 bytes from cache.google.com (64.15.112.99): icmp_seq=2 ttl=57 time=15.3 ms EDIT: I forgot to mentioned that I'm running OpenSuse 13.1