feat(profiles): general update.

apparmor.d/groups/apt/apt-methods-store

@@ -44,6 +44,7 @@ profile apt-methods-store @{exec_path} {
   /root/ r,
 
         /var/lib/apt/lists/{,**} r,
+        /var/lib/ubuntu-advantage/apt-esm/{,**} r,
   owner /var/lib/apt/lists/* rw,
   owner /var/lib/apt/lists/partial/* rw,
   owner /var/lib/ubuntu-advantage/apt-esm/{,**} rw,

apparmor.d/groups/apt/dpkg-preconfigure

@@ -35,6 +35,7 @@ profile dpkg-preconfigure @{exec_path} {
   owner /tmp/*.template.* rw,
   owner /tmp/*.config.* rwPUx,
 
+  owner /var/cache/debconf/ rw,
   owner /var/cache/debconf/{config,passwords,templates}.dat{,-old,-new} rwk,
   owner /var/log/unattended-upgrades/unattended-upgrades-dpkg.log rw,
 

apparmor.d/groups/bus/dbus-daemon

@@ -58,6 +58,8 @@ profile dbus-daemon @{exec_path} flags=(attach_disconnected) {
   /usr/share/gnome-documents/org.gnome.Documents                          rPx,
   /usr/share/org.gnome.Characters/org.gnome.Characters                    rPx,
   /usr/share/org.gnome.Characters/org.gnome.Characters.BackgroundService  rPx,
+  @{user_share_dirs}/gnome-shell/extensions/gsconnect@andyholmes.github.io/service/daemon.js rPx,
+  /usr/share/gnome-shell/extensions/gsconnect@andyholmes.github.io/service/daemon.js rPx,
 
   /etc/dbus-1/{,**} r,
 

apparmor.d/groups/systemd/systemd-tmpfiles

@@ -19,6 +19,7 @@ profile systemd-tmpfiles @{exec_path} flags=(attach_disconnected) {
   capability fsetid,
   capability mknod,
   capability net_admin,
+  capability sys_resource,
   capability syslog,
 
   @{exec_path} mr,

apparmor.d/groups/ubuntu/update-motd-updates-available

@@ -43,8 +43,8 @@ profile update-motd-updates-available @{exec_path} {
 
   /var/log/unattended-upgrades/unattended-upgrades-dpkg.log rw,
 
-  /var/cache/apt/ r,
-  /var/cache/apt/** rwk,
+  owner /var/cache/apt/ rw,
+  owner /var/cache/apt/** rwk,
 
   /tmp/ r,