Rules fix.

apparmor.d/groups/desktop/accounts-daemon

@@ -14,6 +14,8 @@ profile accounts-daemon @{exec_path} {
   include <abstractions/nameservice-strict>
 
   # Needed?
+  capability dac_read_search,
+  capability sys_ptrace,
   deny capability sys_nice,
 
   @{exec_path} mr,

apparmor.d/groups/gvfs/gvfsd-fuse

@@ -1,5 +1,6 @@
 # apparmor.d - Full set of apparmor profiles
 # Copyright (C) 2021 Mikhail Morfikov
+#               2021 Alexandre Pujol <alexandre@pujol.io>
 # SPDX-License-Identifier: GPL-2.0-only
 
 abi <abi/3.0>,
@@ -19,6 +20,7 @@ profile gvfsd-fuse @{exec_path} {
 
   /dev/fuse rw,
 
+  @{PROC}/sys/fs/pipe-max-size r,
 
   profile fusermount {
     include <abstractions/base>

apparmor.d/groups/systemd/systemd-rfkill

@@ -13,6 +13,7 @@ profile systemd-rfkill @{exec_path} {
   include <abstractions/systemd-common>
 
   capability net_admin,
+  capability sys_ptrace,
 
   network netlink raw,
 

apparmor.d/groups/systemd/systemd-tmpfiles

@@ -21,6 +21,7 @@ profile systemd-tmpfiles @{exec_path} {
   @{exec_path} mr,
 
   /etc/machine-id r,
+  /etc/brlapi.key w,
   /usr/share/factory/{,**} r,
 
   # Config file locations