feat(profile): general update.

apparmor.d/profiles-a-f/adduser

@@ -21,7 +21,7 @@ profile adduser @{exec_path} {
   capability fsetid,
   capability setgid,
   capability setuid,
-  capability sys_admin,
+  capability sys_admin,  # For logger
 
   @{exec_path} r,
   @{bin}/perl r,

apparmor.d/profiles-a-f/atd

@@ -20,7 +20,7 @@ profile atd @{exec_path} {
   capability setuid,
   capability sys_resource,
 
-  signal (receive) set=hup,
+  signal (receive) set=hup peer=at,
 
   ptrace (read) peer=unconfined,
 
@@ -28,6 +28,8 @@ profile atd @{exec_path} {
 
   @{sh_path}           rix,
   @{bin}/sendmail     rPUx,
+  @{bin}/unix_chkpwd   rPx,
+  @{bin}/exim4         rPx,
 
   @{etc_ro}/environment r,
   @{etc_ro}/security/limits.d/ r,

apparmor.d/profiles-a-f/borg

@@ -14,6 +14,7 @@ profile borg @{exec_path} {
   include <abstractions/nameservice-strict>
   include <abstractions/python>
 
+  capability dac_override,
   capability dac_read_search,
   capability fowner,
   capability sys_admin,

apparmor.d/profiles-a-f/f3probe

@@ -10,7 +10,7 @@ include <tunables/global>
 @{exec_path} = @{bin}/f3probe
 profile f3probe @{exec_path} {
   include <abstractions/base>
-  include <abstractions/disks-read>
+  include <abstractions/disks-write>
 
   @{exec_path} mr,