feat(profiles): general update.

apparmor.d/profiles-s-z/sudo

@@ -33,6 +33,7 @@ profile sudo @{exec_path} {
 
   ptrace (read),
 
+  signal (send) peer=unconfined,
   signal (send) set=(cont,hup) peer=su,
 
   dbus send bus=system path=/org/freedesktop/login[0-9]

apparmor.d/profiles-s-z/wireplumber

@@ -45,6 +45,7 @@ profile wireplumber @{exec_path} {
   @{sys}/devices/**/sound/**/uevent r,
   @{sys}/devices/pci[0-9]*/**/modalias r,
   @{sys}/devices/pci[0-9]*/**/video4linux/video[0-9]*/uevent r,
+  @{sys}/devices/virtual/dmi/id/{sys_vendor,product_version,product_name} r,
 
   /dev/snd/ r,
   /dev/video[0-9]* rw,

apparmor.d/profiles-s-z/zfs

@@ -1,3 +1,7 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2022 Jeroen Rijken
+# SPDX-License-Identifier: GPL-2.0-only
+
 abi <abi/3.0>,
 
 include <tunables/global>

apparmor.d/profiles-s-z/zpool

@@ -1,3 +1,7 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2022 Jeroen Rijken
+# SPDX-License-Identifier: GPL-2.0-only
+
 abi <abi/3.0>,
 
 include <tunables/global>
@@ -10,17 +14,18 @@ profile zpool @{exec_path} flags=(complain) {
   capability sys_admin,
 
   @{exec_path} rm,
+
   /{usr/,}bin/{,ba,da}sh rix,
   /{usr/,}{local/,}lib/zfs-linux/zpool.d/* rix,
 
   /etc/hostid r,
-  @{PROC}/sys/kernel/spl/hostid r,
 
   @{run}/blkid/blkid.tab rw,
   @{run}/blkid/blkid.tab.old l,
   @{run}/blkid/blkid.tab-* rwl,
 
   @{PROC}/@{pids}/mounts r,
+  @{PROC}/sys/kernel/spl/hostid r,
 
   /dev/pts/[0-9]* rw,
   /dev/zfs rw,