feat(profile): general update.

apparmor.d/profiles-s-z/tlp

@@ -11,22 +11,19 @@ include <tunables/global>
 profile tlp @{exec_path} flags=(attach_disconnected) {
   include <abstractions/base>
   include <abstractions/bus-system>
-  include <abstractions/disks-read>
-  include <abstractions/graphics>
   include <abstractions/bus/org.freedesktop.PolicyKit1>
+  include <abstractions/consoles>
+  include <abstractions/devices-usb-read>
+  include <abstractions/disks-read>
   include <abstractions/nameservice-strict>
-  include <abstractions/perl>
 
   capability dac_read_search,
-  capability net_admin,
   capability sys_nice,
   capability sys_rawio,
   capability sys_tty_config,
 
   network netlink raw,
 
-  ptrace read peer=unconfined,
-
   @{exec_path} mr,
 
   @{sh_path}                    rix,
@@ -72,10 +69,16 @@ profile tlp @{exec_path} flags=(attach_disconnected) {
   @{run}/udev/data/+platform:* r,
 
   @{sys}/bus/pci/devices/ r,
+  @{sys}/class/net/ r,
+  @{sys}/class/power_supply/ r,
   @{sys}/devices/@{pci}/ r,
   @{sys}/devices/@{pci}/{,**/}power/control w,
+  @{sys}/devices/@{pci}/**/host@{int}/**/link_power_management_policy w,
   @{sys}/devices/@{pci}/class r,
+  @{sys}/devices/**/net/**/uevent r,
   @{sys}/devices/system/cpu/cpufreq/policy@{int}/energy_performance_preference rw,
+  @{sys}/devices/virtual/dmi/id/product_version r,
+  @{sys}/devices/virtual/net/**/uevent r,
   @{sys}/firmware/acpi/platform_profile* rw,
   @{sys}/firmware/acpi/pm_profile* rw,
   @{sys}/module/*/parameters/power_save rw,
@@ -100,6 +103,8 @@ profile tlp @{exec_path} flags=(attach_disconnected) {
     include <abstractions/base>
     include <abstractions/app/udevadm>
 
+    @{run}/tlp/lock_tlp rw,
+
     include if exists <local/tlp_udevadm>
   }