update profiles for apparmor3

apparmor.d/child-lsb_release

@@ -15,15 +15,15 @@
 # it is invoked from other confined applications, but not when it is used
 # in regular (unconfined) shell scripts or run directly by the user.
 
-#abi <abi/3.0>,
+abi <abi/3.0>,
 
-#include <tunables/global>
+include <tunables/global>
 
 # Do not attach to /{usr/,}bin/lsb_release by default
 profile child-lsb_release {
-  #include <abstractions/base>
-  #include <abstractions/consoles>
-  #include <abstractions/python>
+  include <abstractions/base>
+  include <abstractions/consoles>
+  include <abstractions/python>
 
   signal (receive) set=(term, kill),
 
@@ -61,5 +61,6 @@ profile child-lsb_release {
 #  deny /tmp/gtalkplugin.log w,
   /dev/dri/card[0-9]* rw,
 
-  #include if exists <local/child-lsb_release>
+  # Site-specific additions and overrides. See local/README for details.
+  include if exists <local/child-lsb_release>
 }