From 5eb08f8de57803664d700b7d05fa7023f6b499b1 Mon Sep 17 00:00:00 2001
From: Alexandre Pujol <alexandre@pujol.io>
Date: Sat, 21 Jun 2025 19:47:49 +0200
Subject: [PATCH] feat(profile): improve pacman profiles.

---
 apparmor.d/groups/pacman/pacman-hook-code | 6 +++---
 apparmor.d/groups/pacman/pacman-key       | 4 ++--
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/apparmor.d/groups/pacman/pacman-hook-code b/apparmor.d/groups/pacman/pacman-hook-code
index 2496d7a9b..ee23781f4 100644
--- a/apparmor.d/groups/pacman/pacman-hook-code
+++ b/apparmor.d/groups/pacman/pacman-hook-code
@@ -6,7 +6,7 @@ abi <abi/4.0>,
 
 include <tunables/global>
 
-@{exec_path} = /usr/share/code-{features,marketplace}/patch.py
+@{exec_path} = /usr/share/code-{features,marketplace}{,-insiders}/patch.py
 profile pacman-hook-code @{exec_path} {
   include <abstractions/base>
   include <abstractions/python>
@@ -20,8 +20,8 @@ profile pacman-hook-code @{exec_path} {
 
   @{lib}/code/product.json rw,
 
-  /usr/share/code-{features,marketplace}/{,*} r,
-  /usr/share/code-{features,marketplace}/cache.json rw,
+  /usr/share/code-{features,marketplace}{,-insiders}/{,*} r,
+  /usr/share/code-{features,marketplace}{,-insiders}/cache.json rw,
 
   include if exists <local/pacman-hook-code>
 }
diff --git a/apparmor.d/groups/pacman/pacman-key b/apparmor.d/groups/pacman/pacman-key
index 025d87b29..a5cee6fa9 100644
--- a/apparmor.d/groups/pacman/pacman-key
+++ b/apparmor.d/groups/pacman/pacman-key
@@ -21,10 +21,10 @@ profile pacman-key @{exec_path} {
   @{bin}/bash         rix,
   @{bin}/chmod        rix,
   @{bin}/gettext      rix,
-  @{bin}/gpg{,2}      rCx -> gpg,
+  @{bin}/gpg{,2}      rCx -> &gpg,
   @{bin}/{,e}grep     rix,
   @{bin}/ngettext     rix,
-  @{bin}/pacman-conf  rPx,
+  @{bin}/pacman-conf  rPx -> &pacman-conf,
   @{bin}/touch        rix,
   @{bin}/tput         rix,
   @{bin}/vercmp       rix,