feat(profile): ubuntu: improve integration with ubuntu.

apparmor.d/profiles-s-z/setvtrgb

@@ -15,6 +15,8 @@ profile setvtrgb @{exec_path} {
 
   @{exec_path} mr,
 
+  /etc/console-setup/vtrgb r,
+
   /dev/tty@{int} rw,
 
   include if exists <local/setvtrgb>

apparmor.d/profiles-s-z/snap

@@ -104,7 +104,10 @@ profile snap @{exec_path} {
   profile systemctl {
     include <abstractions/base>
     include <abstractions/app/systemctl>
-  
+    include <abstractions/bus/org.freedesktop.systemd1>
+
+    network unix stream,
+
     include if exists <local/snap_systemctl>
   }
 

apparmor.d/profiles-s-z/snap-seccomp

@@ -18,6 +18,8 @@ profile snap-seccomp @{exec_path} {
 
   @{exec_path} mr,
 
+  @{lib_dirs}/**.so* mr,
+
   /var/lib/snapd/seccomp/bpf/{,**} rw,
 
   owner @{PROC}/@{pids}/mountinfo r,

apparmor.d/profiles-s-z/ufw

@@ -37,10 +37,10 @@ profile ufw @{exec_path} {
 
     owner @{run}/ufw.lock rwk,
 
-    owner /var/tmp/???????? rw,
-    owner /var/tmp/tmp???????? rw,
-    owner @{tmp}/???????? rw,
-    owner @{tmp}/tmp???????? rw,
+    owner @{tmp}/@{word8} rw,
+    owner @{tmp}/tmp@{word8} rw,
+    owner /var/tmp/@{word8} rw,
+    owner /var/tmp/tmp@{word8} rw,
 
     @{PROC}/@{pid}/fd/ r,
     @{PROC}/@{pid}/net/ip_tables_names r,