feat(profile): general update.

apparmor.d/profiles-g-l/gdk-pixbuf-query-loaders

@@ -9,6 +9,7 @@ include <tunables/global>
 @{exec_path} = @{bin}/gdk-pixbuf-query-loaders
 profile gdk-pixbuf-query-loaders @{exec_path} {
   include <abstractions/base>
+  include <abstractions/consoles>
 
   network inet stream,
   network inet6 stream,

apparmor.d/profiles-g-l/git

@@ -78,7 +78,7 @@ profile git @{exec_path} {
   @{bin}/vim.*           rCx -> editor,
   
   /usr/share/git{,-core}/{,**} r,
-  /usr/share/terminfo/x/xterm-256color r,
+  /usr/share/terminfo/** r,
 
   /etc/gitconfig r,
   /etc/mailname r,
@@ -175,7 +175,7 @@ profile git @{exec_path} {
     @{bin}/which{,.debianutils}            rix,
 
     /usr/share/vim/{,**} r,
-    /usr/share/terminfo/x/xterm-256color r,
+    /usr/share/terminfo/** r,
 
     /etc/vimrc r,
     /etc/vim/{,**} r,

apparmor.d/profiles-g-l/glib-compile-schemas

@@ -9,6 +9,7 @@ include <tunables/global>
 @{exec_path} = @{bin}/glib-compile-schemas
 profile glib-compile-schemas @{exec_path} {
   include <abstractions/base>
+  include <abstractions/consoles>
 
   network inet stream,
   network inet6 stream,

apparmor.d/profiles-g-l/htop

@@ -18,16 +18,18 @@ profile htop @{exec_path} {
   capability sys_nice,
   capability sys_ptrace,
 
-  signal (send),
-  ptrace (read),
-
   network netlink raw,
 
+  signal (send),
+  signal (receive) set=(hup) peer=gnome-terminal-server,
+
+  ptrace (read),
+
   @{exec_path} mr,
 
   @{bin}/lsof   rix,
 
-  /usr/share/terminfo/x/xterm-256color r,
+  /usr/share/terminfo/** r,
 
   /etc/sensors.d/ r,
   /etc/sensors3.conf r,

apparmor.d/profiles-g-l/hugo

@@ -28,7 +28,7 @@ profile hugo @{exec_path} {
 
   /usr/share/git{,-core}/{,**} r,
   /usr/share/mime/{,**} r,
-  /usr/share/terminfo/x/xterm-256color r,
+  /usr/share/terminfo/** r,
 
   /etc/mime.types r,
 

apparmor.d/profiles-g-l/jami-gnome

@@ -1,5 +1,6 @@
 # apparmor.d - Full set of apparmor profiles
 # Copyright (C) 2021 Mikhail Morfikov
+# Copyright (C) 2021-2023 Alexandre Pujol <alexandre@pujol.io>
 # SPDX-License-Identifier: GPL-2.0-only
 
 abi <abi/3.0>,
@@ -10,12 +11,12 @@ include <tunables/global>
 profile jami-gnome @{exec_path} {
   include <abstractions/base>
   include <abstractions/dconf-write>
-  include <abstractions/gtk>
-  include <abstractions/fonts>
-  include <abstractions/fontconfig-cache-read>
-  include <abstractions/freedesktop.org>
   include <abstractions/dri-common>
   include <abstractions/dri-enumerate>
+  include <abstractions/fontconfig-cache-read>
+  include <abstractions/fonts>
+  include <abstractions/freedesktop.org>
+  include <abstractions/gtk>
   include <abstractions/mesa>
   include <abstractions/nameservice-strict>
   include <abstractions/user-download-strict>
@@ -24,6 +25,12 @@ profile jami-gnome @{exec_path} {
 
   @{exec_path} mr,
 
+  @{lib}/{,@{multiarch}/}webkit2gtk-*/WebKitNetworkProcess rix,
+  @{lib}/{,@{multiarch}/}webkit2gtk-*/WebKitWebProcess rix,
+
+  /usr/share/ring/{,**} r,
+  /usr/share/sounds/jami-gnome/{,**} r,
+
   owner @{user_cache_dirs}/ rw,
   owner @{user_cache_dirs}/jami-gnome/ rw,
   owner @{user_cache_dirs}/jami-gnome/** rw,
@@ -38,11 +45,9 @@ profile jami-gnome @{exec_path} {
   owner @{user_share_dirs}/webkitgtk/databases/indexeddb/v0 w,
   owner @{user_share_dirs}/webkitgtk/databases/indexeddb/v1/ w,
 
-  @{lib}/@{multiarch}/webkit2gtk-4.0/WebKitNetworkProcess rix,
-  @{lib}/@{multiarch}/webkit2gtk-4.0/WebKitWebProcess rix,
-
-  /usr/share/ring/{,**} r,
-  /usr/share/sounds/jami-gnome/{,**} r,
+  @{sys}/firmware/acpi/pm_profile r,
+  @{sys}/devices/virtual/dmi/id/chassis_type r,
+  @{sys}/fs/cgroup/** r,
 
        owner @{PROC}/@{pid}/statm r,
        owner @{PROC}/@{pid}/smaps r,
@@ -50,9 +55,5 @@ profile jami-gnome @{exec_path} {
        owner @{PROC}/@{pid}/cgroup r,
              @{PROC}/zoneinfo r,
 
-  @{sys}/firmware/acpi/pm_profile r,
-  @{sys}/devices/virtual/dmi/id/chassis_type r,
-  @{sys}/fs/cgroup/** r,
-
   include if exists <local/jami-gnome>
 }