feat: update profiles.

apparmor.d/profiles-s-z/udisksd

@@ -41,6 +41,7 @@ profile udisksd @{exec_path} flags=(attach_disconnected) {
   /{usr/,}{s,}bin/mkfs.fat    rPx,
   /{usr/,}bin/eject           rPx,
   /{usr/,}bin/ntfs-3g         rPx,
+  /{usr/,}bin/ntfsfix         rPx,
   /{usr/,}bin/systemctl       rPx -> child-systemctl,
   /{usr/,}bin/systemd-escape  rPx,
 

apparmor.d/profiles-s-z/update-initramfs

@@ -1,5 +1,6 @@
 # apparmor.d - Full set of apparmor profiles
-# Copyright (C) 2019-2021 Mikhail Morfikov
+# Copyright (C) 2019-2022 Mikhail Morfikov
+# Copyright (C) 2022 Alexandre Pujol <alexandre@pujol.io>
 # SPDX-License-Identifier: GPL-2.0-only
 
 abi <abi/3.0>,
@@ -11,8 +12,7 @@ profile update-initramfs @{exec_path} {
   include <abstractions/base>
   include <abstractions/consoles>
 
-  # Needed? (comm="ischroot")
-  #ptrace (read),
+  ptrace (read) peer=unconfined,
 
   @{exec_path} rix,
   /{usr/,}bin/{,ba,da}sh    rix,

apparmor.d/profiles-s-z/virt-manager

@@ -22,6 +22,7 @@ profile virt-manager @{exec_path} flags=(attach_disconnected) {
   include <abstractions/mesa>
   include <abstractions/nameservice-strict>
   include <abstractions/openssl>
+  include <abstractions/opencl>
   include <abstractions/python>
   include <abstractions/ssl_certs>
   include <abstractions/thumbnails-cache-read>
@@ -45,6 +46,7 @@ profile virt-manager @{exec_path} flags=(attach_disconnected) {
   /{usr/,}{s,}bin/libvirtd                      rPx,
   /{usr/,}lib/spice-client-glib-usb-acl-helper  rPx,
 
+  /usr/share/egl/{,**} r,
   /usr/share/glib-2.0/schemas/gschemas.compiled r,
   /usr/share/gtksourceview-4/{,**} r,
   /usr/share/hwdata/*.ids r,