feat: update profiles.

apparmor.d/profiles-a-f/aa-status

@@ -9,6 +9,7 @@ include <tunables/global>
 @{exec_path} = /{usr/,}{s,}bin/aa-status
 profile aa-status @{exec_path} {
   include <abstractions/base>
+  include <abstractions/consoles>
 
   capability dac_read_search,
   capability sys_ptrace,

apparmor.d/profiles-a-f/borg

@@ -1,6 +1,6 @@
 # apparmor.d - Full set of apparmor profiles
-# Copyright (C) 2020-2021 Mikhail Morfikov
-#               2021 Alexandre Pujol <alexandre@pujol.io>
+# Copyright (C) 2020-2022 Mikhail Morfikov
+# Copyright (C) 2021-2022 Alexandre Pujol <alexandre@pujol.io>
 # SPDX-License-Identifier: GPL-2.0-only
 
 abi <abi/3.0>,
@@ -43,6 +43,7 @@ profile borg @{exec_path} {
         @{PROC}/sys/kernel/random/boot_id r,
 
   @{run}/systemd/userdb/ r,
+  @{run}/resolvconf/resolv.conf r,
 
   owner @{user_cache_dirs}/ rw,
   owner @{user_cache_dirs}/borg/ rw,
@@ -80,6 +81,10 @@ profile borg @{exec_path} {
   owner @{MOUNTS}/ r,
   owner @{MOUNTS}/** rwkl -> @{MOUNTS}/**,
 
+  # borg serve on server's side
+  owner /home/borg/*/ rw,
+  owner /home/borg/*/{,**} rw,
+
   # For exporting the key
   owner /**/key w,
 

apparmor.d/profiles-a-f/dmidecode

@@ -9,6 +9,7 @@ include <tunables/global>
 @{exec_path} = /{usr/,}{s,}bin/dmidecode
 profile dmidecode @{exec_path} {
   include <abstractions/base>
+  include <abstractions/consoles>
 
   @{exec_path} mr,