From 5d1ef4087741d3acf84fe50b26c5669ade291f10 Mon Sep 17 00:00:00 2001
From: Alexandre Pujol <alexandre@pujol.io>
Date: Fri, 29 Aug 2025 19:55:42 +0200
Subject: [PATCH] feat(profile): add some missing proc access.

Due to recent changes in base-strict.
---
 apparmor.d/abstractions/app/pgrep           | 1 +
 apparmor.d/groups/gnome/gdm-generate-config | 7 ++++---
 apparmor.d/groups/procps/htop               | 1 +
 3 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/apparmor.d/abstractions/app/pgrep b/apparmor.d/abstractions/app/pgrep
index 0ec14bea0..f563712ca 100644
--- a/apparmor.d/abstractions/app/pgrep
+++ b/apparmor.d/abstractions/app/pgrep
@@ -19,6 +19,7 @@
   @{sys}/devices/system/node/node@{int}/meminfo r,
 
   @{PROC}/ r,
+  @{PROC}/@{pid}/status r,
   @{PROC}/@{pids}/cgroup r,
   @{PROC}/@{pids}/cmdline r,
   @{PROC}/@{pids}/environ r,
diff --git a/apparmor.d/groups/gnome/gdm-generate-config b/apparmor.d/groups/gnome/gdm-generate-config
index 9d910cdd2..6e67866f5 100644
--- a/apparmor.d/groups/gnome/gdm-generate-config
+++ b/apparmor.d/groups/gnome/gdm-generate-config
@@ -42,9 +42,10 @@ profile gdm-generate-config @{exec_path} {
   @{sys}/devices/system/node/node@{int}/meminfo r,
 
   @{PROC}/ r,
-  @{PROC}/@{pid}/cgroup r,
-  @{PROC}/@{pid}/cmdline r,
-  @{PROC}/@{pid}/stat r,
+  @{PROC}/@{pids}/cgroup r,
+  @{PROC}/@{pids}/cmdline r,
+  @{PROC}/@{pids}/status r,
+  @{PROC}/@{pids}/stat r,
   @{PROC}/uptime r,
 
   profile pgrep {
diff --git a/apparmor.d/groups/procps/htop b/apparmor.d/groups/procps/htop
index d59fde5e5..4937f6875 100644
--- a/apparmor.d/groups/procps/htop
+++ b/apparmor.d/groups/procps/htop
@@ -105,6 +105,7 @@ profile htop @{exec_path} {
   @{PROC}/@{pids}/comm r,
   @{PROC}/@{pids}/environ r,
   @{PROC}/@{pids}/io r,
+  @{PROC}/@{pids}/maps r,
   @{PROC}/@{pids}/mounts r,
   @{PROC}/@{pids}/net/dev r,
   @{PROC}/@{pids}/oom_{,score_}adj r,