Unbreak Debian 11 and partially Ubuntu 22.04 (Wayland+GDM+Gnome) (#81)

* Unbreaking Debian 11 and partially Ubuntu 22.04

* pre-cleanup

* pre-cleanup2

* Update im-launch

* Update gnome-extension-ding

* polishing

* not yet

* Update ubuntu.flags

Allow GDM to boot. `No new privs` fix.

* Update debian.flags

Allow GDM to boot. `No new privs` fix.

* Update CONTRIBUTING.md

* fixes

* reverting w

* move setpriv to main.flags

apparmor.d/profiles-a-f/appstreamcli

@@ -40,6 +40,7 @@ profile appstreamcli @{exec_path} flags=(complain) {
   /var/lib/app-info/ w,
   /var/lib/app-info/yaml/ r,
   /var/lib/app-info/yaml/*.yml.gz w,
+  /var/lib/app-info/icons/ r,
   /var/lib/apt/lists/ r,
   /var/lib/apt/lists/*.gz r,
   /var/lib/flatpak/appstream/{,**} r,
@@ -67,6 +68,7 @@ profile appstreamcli @{exec_path} flags=(complain) {
 
     /{usr/,}bin/curl mr,
 
+    include if exists <local/appstreamcli_curl>
   }
 
   include if exists <local/appstreamcli>

apparmor.d/profiles-a-f/cc-remote-login-helper

@@ -0,0 +1,17 @@
+# apparmor.d - Full set of apparmor profiles
+# SPDX-License-Identifier: GPL-2.0-only
+
+abi <abi/3.0>,
+
+include <tunables/global>
+
+@{exec_path} = @{libexec}/cc-remote-login-helper
+profile cc-remote-login-helper @{exec_path} {
+  include <abstractions/base>
+
+  capability sys_nice,
+
+  @{exec_path} mr,
+
+  include if exists <local/cc-remote-login-helper>
+}

apparmor.d/profiles-a-f/fprintd

@@ -41,8 +41,9 @@ profile fprintd @{exec_path} flags=(attach_disconnected) {
 
   @{run}/systemd/journal/socket rw,
   @{run}/systemd/inhibit/*.ref w,
+  @{run}/udev/data/c239:[0-9]* r,
 
   @{sys}/class/hidraw/ r,
 
   include if exists <local/fprintd>
-}
+}