Unbreak Debian 11 and partially Ubuntu 22.04 (Wayland+GDM+Gnome) (#81)

* Unbreaking Debian 11 and partially Ubuntu 22.04

* pre-cleanup

* pre-cleanup2

* Update im-launch

* Update gnome-extension-ding

* polishing

* not yet

* Update ubuntu.flags

Allow GDM to boot. `No new privs` fix.

* Update debian.flags

Allow GDM to boot. `No new privs` fix.

* Update CONTRIBUTING.md

* fixes

* reverting w

* move setpriv to main.flags

apparmor.d/groups/systemd/systemd-hostnamed

@@ -8,7 +8,7 @@ abi <abi/3.0>,
 include <tunables/global>
 
 @{exec_path} = /{usr/,}lib/systemd/systemd-hostnamed
-profile systemd-hostnamed @{exec_path} flags=(attach_disconnected) {
+profile systemd-hostnamed @{exec_path}  flags=(attach_disconnected) {
   include <abstractions/base>
   include <abstractions/dbus-strict>
   include <abstractions/systemd-common>
@@ -30,7 +30,7 @@ profile systemd-hostnamed @{exec_path} flags=(attach_disconnected) {
        member={Get,GetAll,SetHostname}
        peer=(name=:*),
 
-  dbus bind bus=system 
+  dbus bind bus=system
        name=org.freedesktop.hostname[0-9],
 
   @{exec_path} mr,
@@ -50,8 +50,9 @@ profile systemd-hostnamed @{exec_path} flags=(attach_disconnected) {
   @{sys}/firmware/dmi/entries/*/raw r,
 
   /etc/.#hostname* rw,
+  /etc/.#machine-info?????? rw,
   /etc/hostname rw,
-  /etc/machine-info r,
+  /etc/machine-info rw,
 
   @{run}/udev/data/+dmi:id r,
 

apparmor.d/groups/systemd/systemd-resolved

@@ -37,6 +37,11 @@ profile systemd-resolved @{exec_path} flags=(attach_disconnected) {
   dbus receive bus=system path=/org/freedesktop/resolve[0-9]
        interface=org.freedesktop.resolve[0-9].Manager,
 
+  dbus receive bus=system path=/org/freedesktop/login[0-9]*
+       interface=org.freedesktop.login[0-9]*.Manager
+       member={PrepareForSleep,PrepareForShutdown}
+       peer=(name=:*, label=systemd-logind),
+
   dbus bind bus=system 
        name=org.freedesktop.resolve[0-9],
 

apparmor.d/groups/systemd/systemd-sleep

@@ -10,6 +10,7 @@ include <tunables/global>
 profile systemd-sleep @{exec_path} {
   include <abstractions/base>
   include <abstractions/nameservice-strict>
+  include <abstractions/dbus-strict>
   include <abstractions/systemd-common>
 
   capability net_admin,
@@ -21,6 +22,8 @@ profile systemd-sleep @{exec_path} {
   /{usr/,}bin/{,ba,da}sh                   rix,
   /{usr/,}bin/nvidia-sleep.sh              rix,
   /{usr/,}lib/systemd/system-sleep/nvidia  rix,
+  /{usr/,}lib/systemd/system-sleep/hdparm  rix,
+  /{usr/,}lib/systemd/system-sleep/unattended-upgrades rix,
 
   /etc/systemd/sleep.conf r,
   /etc/systemd/sleep.conf.d/{,*} r,
@@ -32,4 +35,4 @@ profile systemd-sleep @{exec_path} {
   /dev/tty rw,
 
   include if exists <local/systemd-sleep>
-}
+}

apparmor.d/groups/systemd/systemd-timesyncd

@@ -23,8 +23,8 @@ profile systemd-timesyncd @{exec_path} flags=(attach_disconnected) {
 
   dbus send bus=system path=/org/freedesktop/DBus
        interface=org.freedesktop.DBus
-       member=RequestName
-       peer=(name=org.freedesktop.DBus),
+       member={RequestName,ReleaseName}
+       peer=(name=org.freedesktop.DBus, label=dbus-daemon),
 
   dbus bind bus=system
        name=org.freedesktop.timesync1,