feat: profiles update.

apparmor.d/profiles-a-f/atd

@@ -21,11 +21,16 @@ profile atd @{exec_path} {
 
   signal (receive) set=hup,
 
+  ptrace (read) peer=unconfined,
+
   @{exec_path} mr,
 
   /{usr/,}bin/{,ba,da}sh    rix,
   /{usr/,}{s,}bin/sendmail  rPUx,
 
+  /etc/environment r,
+  /etc/security/limits.d/ r,
+
   /var/spool/cron/atjobs/{,*} rwl,
   /var/spool/cron/atspool/{,*} rwl,
 

apparmor.d/profiles-a-f/fail2ban-client

@@ -7,7 +7,7 @@ abi <abi/3.0>,
 include <tunables/global>
 
 @{exec_path} = /{usr/,}bin/fail2ban-client
-profile fail2ban-client @{exec_path} {
+profile fail2ban-client @{exec_path} flags=(attach_disconnected) {
   include <abstractions/base>
   include <abstractions/nameservice-strict>
   include <abstractions/python>