feat(profiles): general update.

apparmor.d/profiles-g-l/lspci

@@ -1,5 +1,6 @@
 # apparmor.d - Full set of apparmor profiles
 # Copyright (C) 2019-2021 Mikhail Morfikov
+# Copyright (C) 2023 Alexandre Pujol <alexandre@pujol.io>
 # SPDX-License-Identifier: GPL-2.0-only
 
 abi <abi/3.0>,
@@ -12,31 +13,30 @@ profile lspci @{exec_path} flags=(attach_disconnected) {
   include <abstractions/consoles>
   include <abstractions/nameservice-strict>
 
-  # Needed when run as root
   capability sys_admin,
 
   @{exec_path} mr,
 
+  /app/lib/libzypak-preload-host*.so rm,
+
+  /usr/share/hwdata/pci.ids r,
+  /usr/share/misc/pci.ids r,
+  /usr/share/misc/pci.ids.gz r,
+
+  /etc/modprobe.d/{,*.conf} r,
+  /etc/udev/hwdb.bin r,
+
+  owner @{HOME}/.pciids-cache.tmp-*-@{pid} rw,
+  owner @{HOME}/.pciids-cache rw,
+
   @{sys}/bus/pci/devices/ r,
   @{sys}/bus/pci/slots/ r,
   @{sys}/bus/pci/slots/[0-9]*/address r,
   @{sys}/devices/pci[0-9]*/** r,
 
-  /usr/share/hwdata/pci.ids r,
-  /usr/share/misc/pci.ids r,
-  /usr/share/misc/pci.ids.gz r,
-
-  /etc/udev/hwdb.bin r,
-
-  /etc/modprobe.d/{,*.conf} r,
-
-  owner @{HOME}/.pciids-cache.tmp-*-@{pid} rw,
-  owner @{HOME}/.pciids-cache rw,
-
   @{PROC}/cmdline r,
-
-  # file_inherit
   @{PROC}/ioports r,
+
   deny @{user_share_dirs}/gvfs-metadata/* r,
 
   include if exists <local/lspci>